31 Jul
2013
31 Jul
'13
9:30 a.m.
Am 31.07.2013 00:00, schrieb Matt Zagrabelny:
# cat /var/log/syslogblock 2013-07-30 16:26:42 Failed password for invalid user doug from 131.212.109.58 port 37867 ssh2 +131.212.109.58
template("+${usracct.device}\n")
Are you sure that usracct.device contains only the IP? I use syslog-ng with xt_recent without any problems: http://blog.schaal-24.de/?p=159&lang=en regards Florian