exlude sample log directory

DShield-ISC · May 7, 2017 · 1514f0b · 1514f0b
1 parent 17e5988
commit 1514f0b
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 2 deletions.
diff --git a/.gitignore b/.gitignore
@@ -14,3 +14,4 @@ bin/sitecopy.pyc
 bin/db_builder.pyc
 .lastufw
 *.pyc
+samplelogs/
diff --git a/bin/install.sh b/bin/install.sh
@@ -1020,7 +1020,7 @@ fi
 
 cat >> /etc/network/iptables <<EOF
 # log all traffic with original ports
--A PREROUTING -i $interface -j LOG --log-prefix " DSHIELDINPUT "
+-A PREROUTING -i $interface -m state --state NEW,INVALID -j LOG --log-prefix " DSHIELDINPUT "
 # redirect honeypot ports
 -A PREROUTING -p tcp -m tcp --dport 22 -j REDIRECT --to-ports 2222
 COMMIT

diff --git a/etc/rsyslog.d/dshield.conf b/etc/rsyslog.d/dshield.conf
@@ -1,2 +1,2 @@
 $template DShieldTemplate,"%timegenerated:::date-unixtimestamp% %HOSTNAME% %syslogtag%%msg%\n"
-if $msg contains " INPUT IN=%%interface%%" then /var/log/dshield.log;DShieldTemplate
+if $msg contains " DSHIELDINPUT " then /var/log/dshield.log;DShieldTemplate