LF_PERMBLOCK_ALERT off, but Failed SSHD alerts are sent?

Post Reply
horseharold
Junior Member
Posts: 3
Joined: 05 Nov 2018, 21:51

LF_PERMBLOCK_ALERT off, but Failed SSHD alerts are sent?

Post by horseharold »

Hi there,

From what I can make out, the settings are correct to only receive notifications for successful logins via SSH.

# Send an email alert if anyone logs in successfully using SSH
LF_SSH_EMAIL_ALERT = "1"

LF_PERMBLOCK_ALERT = "0"


Though we're still receiving alerts when there are blocks caused by failed SSH logins.

Time: Mon Jan 17 23:29:24 2022 +1000
IP: 0.0.0.0 (ZZ/Country/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked: Permanent Block [LF_SSHD]

Log entries:
Jan 17 23:29:10 ...


How do we go about stopping these emails?

Thank you!
Post Reply