Page 1 of 1
logging suspicious behavior /ddos, failed login attempts etc
Posted: Fri Apr 20, 2012 3:55 pm
by razorpl
Hi there.
Is there possibility to log suspicious behaviour like ddos, or logging attempts successful/unsuccessful. and send it to desired email?
Re: logging suspicious behavior /ddos, failed login attempts
Posted: Fri Jun 01, 2012 7:27 pm
by Draggeta
I have to agree with this. The stock firmware of the WNDR3700 has a log and it is very handy to see if something strange is happened during the day, while also being able to send daily logs to my mail.
Re: logging suspicious behavior /ddos, failed login attempts
Posted: Mon Jun 25, 2012 10:03 am
by razorpl
Dear founder of gargoyle project. WIll You consider adding this option?
Re: logging suspicious behavior /ddos, failed login attempts
Posted: Fri Oct 23, 2015 4:15 am
by sigwx
Hello
Add another to the list of users that would appreciate having this feature.
Re: logging suspicious behavior /ddos, failed login attempts
Posted: Fri Oct 23, 2015 4:20 am
by Lantis
There is an email logging plugin.
And the system log already logs failed authentication and ssh attempts.
Is there any other functionality that you require?
Re: logging suspicious behavior /ddos, failed login attempts
Posted: Sat Nov 21, 2015 2:42 pm
by sigwx
I think the idea is having a way to include
option log '1'
as part of /etc/config/firewall in the zone for the wan, so that any dropped/rejected attempt is logged as part of /var/log/messages