Le Tue, Apr 18, 2006 à 05:22:33PM -0400, Yaroslav Halchenko a écrit > Francois -- could you please send me exemplar lines of your log files > (including fail2ban log, auth.log, and apache.log/exim/postfix if you > have any of those) -- single line with timestamp would suffice. >
Section Apache use /var/log/apache2/error.log : [Sun Apr 02 15:30:14 2006] [error] [client 218.69.111.102] File does not exist: ..... [Mon Apr 03 02:15:07 2006] [notice] caught SIGTERM, shutting down Section ApacheAttacks use /var/log/apache2/access.log : 83.14.161.12 - - [15/Apr/2006:13:49:51 +0200] "GET /.... HTTP/1.0" 404 323 "-" "-" 222.149.130.78 - - [17/Apr/2006:09:47:03 +0200] "GET / HTTP/1.0" 200 1506 "-" "-" Section SSH use /var/log/auth.log : Apr 18 18:06:41 .... sshd[2988]: User ... from 72-164-242-88.dia.static.qwest.net not allowed because not listed in AllowUsers I gave you example of fail2ban.log in the bugreport. -- Francois Mescam