Write lo log file auth events (login, logout, login attempt)

[alesnav]

Hello,

I must protect my server against brute force attacks and I will do it using fail2ban. This tool reads log files looking for any custom regex configured in its config file.

I see that all info is sent to daemon.log in /var/log but logins, logouts and login attempts are not shown in that file. The most similiar sentence is "transmission-daemon requiring authentication", but it does not include any info. To be used by fail2ban, these three fields would be enough: success/failed, user, source ip.

Would it be possible to set it?

Thanks

[alesnav]

Well, I should say that I have protected it using nginx+ssl+basic auth+proxy... using nginx logs.

But if transmission-daemon writes directly to log, I can do it without using basic auth also in nginx.

Thanks!