Sample configuration file. to be placed in /etc/conf.d

fwlogwatch (text/plain), 1.45 KB, created by Bjoern Thorwirth on 2008-08-11 21:11:24 UTC

#
#Basic setup
#
#Path to fwlogwatch binary
FWLW=/usr/sbin/fwlogwatch
# Path to fwlogwatch configuration file. Set up this configuration
# for the fwlogwatch system services.
# You may place an extra configuration file in /etc/fwlogwatch.config.
# This s the place where it searches for its configuration by default
CONFIG=/etc/fwlogwatch/fwlogwatch.config
#Logfile to analyze / watch
WATCH_LOG=/var/log/firewall.log

#
# Options for realtime processing
#
# Note: If you are going to use this init script you shouldn't
# 	set the Pid file in felogwatch.config. Furthermore you should inspect
#	the path settings for the response and notify scripts in
#	fwlogwatch.config
ALERT_THRESHOLD=5
# Packets older than this time period will be ignored. For Format see
# man page
TIME_TO_FOREGET=1d
REALTIME_OPTIONS=""
# default is to log alerts into syslog- set this option to yes and an extra
# script will be executed
REALTIME_NOTIFY=yes
# set this option and a response script will be executed. Action may be
# e.g. ip banning. See example scripts in /etc/fwlogwatch
REALTIME_RESPONSE=yes

#
# Options for log summary mode
#
# This options enables the execution of the CRON script
RUN_CRON_JOB=YES
# additional options which should be passed to fwlogwatch
CRON_OPTIONS="-Nnte"
# corresponds to -o option
#CRON_FILE=
# time range to analyze. n + (d)ay , (w)eek , (m)onth ..
# See man page for more detail
CRON_ANALYZE_RANGE=2d
# the email adress for mail notifications
CRON_MAILTO=root