Tracks IP addresses that cause authentication failures
'authfail' is a tool for adding IP addresses to an ACL when entities from those addresses attempt to log into a system, but cause authentication failures in auth.log. It reads data from auth.log in real time and adds the IP into netfilter with a DROP/REJECT policy.
released on 23 June 2014
This entry (in part or in whole) was last reviewed on 22 December 2016.