More frequent CRON interval options
-
Recently the company I work for has had an increase in malicious activity. The web developers have created a system to look through the IIS logs and back end SQL query to identify bad actors that slipped by SNORT and our existing reputation lists managed by pfBlockerNG. They ended up having a database of bad actors we identified internally and then have a separate process to write the source IPs to a text file which we ingest into the firewall using pfBlockerNG. Everything is working and it was even fun to set up! The problem is that file is updated every 5 minutes so pfblockerNG is at most 55 minutes behind. Is there a way to increase the update frequency to 10 to 15 min, so we don't have to run it manually so frequently?
Thank you
-
I am still stuck on this. Under the CRON jobs I tried to edit this from this:
0 * * * * root /usr/local/bin/php /usr/local/www/pfblockerng/pfblockerng.php cron >> /var/log/pfblockerng/pfblockerng.log 2>&1to this:
*/15 * * * * root /usr/local/bin/php /usr/local/www/pfblockerng/pfblockerng.php cron >> /var/log/pfblockerng/pfblockerng.log 2>&1However, the Updates tab in pfBlockerNG says that the CRON job is missing, and then deletes the job and creates a new one with the hourly update interval.
So this does not work
-
@rtw915 said in More frequent CRON interval options:
I am still stuck on this. Under the CRON jobs I tried to edit this from this:
0 * * * * root /usr/local/bin/php /usr/local/www/pfblockerng/pfblockerng.php cron >> /var/log/pfblockerng/pfblockerng.log 2>&1to this:
*/15 * * * * root /usr/local/bin/php /usr/local/www/pfblockerng/pfblockerng.php cron >> /var/log/pfblockerng/pfblockerng.log 2>&1However, the Updates tab in pfBlockerNG says that the CRON job is missing, and then deletes the job and creates a new one with the hourly update interval.
So this does not work
You should not change these cron entries.
They are set and maintained by the pfblockerng package.
