User:Lostcontrol

From Fail2ban

Jump to: navigation, search

Links to mailing lists, etc. don't seem to be working...so

vsftpd seems to keep timestamps in logfiles in UTC, unless one sets the "use_localtime=YES" configuration flag. The docs on vsftp makes it sound like this is just for directory listsings, but it also applies to the vsftpd.log file entries.

As mentioned in the FAQ, having the timestamps synced is needed, I was seeing a LOT of fail2ban evasion/bruteforce attempts on ftp and couldn't see why...now I know.

A quick note in the docs might make it easier for others.

Personal tools