# #Basic setup # #Path to fwlogwatch binary FWLW=/usr/sbin/fwlogwatch # Path to fwlogwatch configuration file. Set up this configuration # for the fwlogwatch system services. # You may place an extra configuration file in /etc/fwlogwatch.config. # This s the place where it searches for its configuration by default CONFIG=/etc/fwlogwatch/fwlogwatch.config #Logfile to analyze / watch WATCH_LOG=/var/log/firewall.log # # Options for realtime processing # # Note: If you are going to use this init script you shouldn't # set the Pid file in felogwatch.config. Furthermore you should inspect # the path settings for the response and notify scripts in # fwlogwatch.config ALERT_THRESHOLD=5 # Packets older than this time period will be ignored. For Format see # man page TIME_TO_FOREGET=1d REALTIME_OPTIONS="" # default is to log alerts into syslog- set this option to yes and an extra # script will be executed REALTIME_NOTIFY=yes # set this option and a response script will be executed. Action may be # e.g. ip banning. See example scripts in /etc/fwlogwatch REALTIME_RESPONSE=yes # # Options for log summary mode # # This options enables the execution of the CRON script RUN_CRON_JOB=YES # additional options which should be passed to fwlogwatch CRON_OPTIONS="-Nnte" # corresponds to -o option #CRON_FILE= # time range to analyze. n + (d)ay , (w)eek , (m)onth .. # See man page for more detail CRON_ANALYZE_RANGE=2d # the email adress for mail notifications CRON_MAILTO=root