Lightweight daemon for monitoring logs and blocking activity on a Linux server.
Before running the application, ensure you have a configuration file at config/logker_config.toml. You can edit this file using any text editor like vim or nano:
# Edit configuration file
nano config/logker_config.toml
# Or
vim config/logker_config.tomllog_files = ["/var/log/auth.log"] # Path to the log files to monitor
failed_login_threshold = 5 # Number of failed logins before blocking an IP
port_scan_threshold = 10 # Port scan attempts before blocking an IP
ban_duration = 3600 # Ban duration in seconds
syn_ack_response = true # Send SYN-ACK responseAfter setting up the configuration file, you can run Logker:
cargo run -- --config-path config/logker_config.tomlTo run it as a daemon:
cargo run -- --config-path config/logker_config.toml --daemonizeTo stop:
sudo pkill logker-
Clone the repository to the Linux server:
git clone https://github.com/cbaezp/logker.git cd logker -
Follow the steps in the
README.mdto configure and run the application.