https://github.com/navytitanium/pfs-paranoid

PFsense plugin to receive login alerts (SSH/Web GUI)
https://github.com/navytitanium/pfs-paranoid

login-alert pfsense pfsense-logs ssh-alert

Last synced: 23 days ago
JSON representation

PFsense plugin to receive login alerts (SSH/Web GUI)

• Host: GitHub
• URL: https://github.com/navytitanium/pfs-paranoid
• Owner: NavyTitanium
• Created: 2024-04-20T17:46:07.000Z (about 2 years ago)
• Default Branch: main
• Last Pushed: 2024-04-21T18:43:50.000Z (about 2 years ago)
• Last Synced: 2025-03-01T00:59:44.027Z (over 1 year ago)
• Topics: login-alert, pfsense, pfsense-logs, ssh-alert
• Language: PHP
• Homepage:
• Size: 81.1 KB
• Stars: 2
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
# pfs-paranoid

PFsense plugin to receive login alerts (SSH/Web GUI)

## How does it work ? 

The **monitor.sh** script parses the log file `/var/log/auth.log` and sends it to **insert.php** for additional processing and insertion into the local SQLite3 database. If the conditions are met and the entry is new, the script also sends the notifications by utilizing the functions implemented in the pfSense file `/etc/inc/notices.inc`. E.g:

- notify_via_slack($message)

- notify_via_pushover($message)

- notify_via_telegram($message)

- notify_via_smtp($message)

Those settings are predefined by the administrator in: System -> Advanced -> Notifications

# Installation

**monitor.sh** has to be in /tmp/

`chmod +x /tmp/monitor.sh`

**paranoid.php**, **paranoid.inc** and **insert.php** goes in `/usr/local/www/packages/paranoid/`

## Interface

https://pfsense.local/packages/paranoid/paranoid.php

![paranoid.php](Paranoid-Status_Login-monitor.png)

# Todo

Refactor the project to standardize it for pfSense and create a FreeBSD package.