Hi, I'm having issues running an external script. ENABLE_EXT_SCRIPT_EXEC is set to Y
script variable is: EXTERNAL_SCRIPT /scripts/banip.sh SRCIP;
The first line of my script (aside from /bin/sh is:
echo "Reporting ${1} to blocklist.de" | logger -t psad
However, the script isn't run nd syslog doesn't show me anything, while
psad says:
Dec 23 19:10:18 xxxxx psad: scan detected (Nmap -sT or -sS scan): xxx.xxx.xxx.xxx -> xxx.xxx.xxx.xxx tcp: Ä21-8080Å flags: SYN tcp pkts: 58 DL: 2
Dec 23 19:10:18 xxxxx psad: added iptables auto-block against xxx.xxx.xxx.xxx for 3600 seconds
So it obviously sees my test scan and should run the script, however it does not.
Perms for my script and it's folder are root:root 0750 Would be nice to solve this issue. - Julian
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss
