Home › Forums › BlockHosts

whitelist ip being blocked

Mon, 2005–Dec–12

Hi,
Install of version 1.0.3 went smooth. Did a dry run and my own ip is getting listed in the

#---- BlockHosts Additions

the reason is that I have more than six failed login attempts in the auth.log as I did not realise I had changed my password.

Now my IP is added to the "# permanent whitelist addresses - these should always be allowed access" does that mean that even if my ip address gets added to the "#---- BlockHosts Additions" will still be allowed access.

Also if anybody could post a standard sample blockhost.cfg file that would be great.

great script by the way.

‹ Unable to block AllowGroups line in FreeBSD 6.0 due to no regexp Failed password on existing user not detected... ›
Mon, 2005-12-12 21:12 — ac

whitelist works, sample in kit

1: first run will add all failed IPs over days or months to the watch list, but within 12 hours (default), it will clear most IPs - in your case, your IP address will be cleared, as long as you did not have any failed access in the previous 12 hours.

2:whitelist working is described in the man pages - hosts_access, hosts.allow. As soon as a line with the IP address is matched in the hosts.allow file, the rest of the hosts.allow file is ignored.

3: example blockshosts.cfg is provided in the kit. By default, it is also installed in /etc/blockhosts.cfg - all lines are commented out, and descrptions provided in case defaults need to be changed.
Alternately, you can provide command line arguments to change defaults.