If i take a look at the rc-status, it's mean that denyhost is crashed - but it work, he block and release, download new ips ...
Sys: Gentoo 2.6.25-hardened-r8 on Pentium(R) 4 CPU 1.60GHz
Version:
app-admin/denyhosts
Installed versions: 2.6-r1(11:58:31 17.09.2008)
/var/log/denyhost:
INFO DenyHosts launched with the following args:
INFO /usr/bin/denyhosts --daemon -c /etc/denyhosts.conf
INFO DenyHosts configuration settings:
INFO ADMIN_EMAIL: [None]
INFO AGE_RESET_INVALID: [864000]
INFO AGE_RESET_RESTRICTED: [2160000]
INFO AGE_RESET_ROOT: [2160000]
INFO AGE_RESET_VALID: [432000]
INFO ALLOWED_HOSTS_HOSTNAME_LOOKUP: [no]
INFO BLOCK_SERVICE: [sshd]
INFO DAEMON_LOG: [/var/log/denyhosts]
INFO DAEMON_LOG_MESSAGE_FORMAT: [%(asctime)s - %(name)-12s: %(levelname)-8s %(m essage)s]
INFO DAEMON_LOG_TIME_FORMAT: [%b %d %H:%M:%S]
INFO DAEMON_PURGE: [3600]
INFO DAEMON_SLEEP: [30]
INFO DENY_THRESHOLD_INVALID: [2]
INFO DENY_THRESHOLD_RESTRICTED: [1]
INFO DENY_THRESHOLD_ROOT: [1]
INFO DENY_THRESHOLD_VALID: [3]
INFO FAILED_ENTRY_REGEX: [None]
INFO FAILED_ENTRY_REGEX2: [None]
INFO FAILED_ENTRY_REGEX3: [None]
INFO FAILED_ENTRY_REGEX4: [None]
INFO FAILED_ENTRY_REGEX5: [None]
INFO FAILED_ENTRY_REGEX6: [None]
INFO FAILED_ENTRY_REGEX7: [None]
INFO HOSTNAME_LOOKUP: [NO]
INFO HOSTS_DENY: [/etc/hosts.blocked]
INFO LOCK_FILE: [/var/run/denyhosts.pid]
INFO PLUGIN_DENY: [None]
INFO PLUGIN_PURGE: [None]
INFO PURGE_DENY: [3600]
INFO PURGE_THRESHOLD: [0]
INFO RESET_ON_SUCCESS: [yes]
INFO SECURE_LOG: [/var/log/auth.log]
INFO SMTP_DATE_FORMAT: [%a, %d %b %Y %H:%M:%S %z]
INFO SMTP_PASSWORD: [None]
INFO SMTP_USERNAME: [None]
INFO SSHD_FORMAT_REGEX: [None]
INFO SUCCESSFUL_ENTRY_REGEX: [None]
INFO SUSPICIOUS_LOGIN_REPORT_ALLOWED_HOSTS: [YES]
INFO SYNC_DOWNLOAD: [yes]
INFO SYNC_DOWNLOAD_RESILIENCY: [18000]
INFO SYNC_DOWNLOAD_THRESHOLD: [3]
INFO SYNC_INTERVAL: [3600]
INFO SYNC_SERVER: [http://xmlrpc.denyhosts.net:9911]
INFO SYNC_UPLOAD: [yes]
INFO SYSLOG_REPORT: [YES]
INFO WORK_DIR: [/var/lib/denyhosts]
INFO restricted: set([])
INFO launching DenyHosts daemon (version 2.6)...
INFO DenyHosts daemon is now running, pid: 32142
INFO send daemon process a TERM signal to terminate cleanly
INFO eg. kill -TERM 32142
INFO monitoring log: /var/log/auth.log
INFO sync_time: 3600
INFO daemon_purge: 3600
INFO daemon_sleep: 30
INFO purge_sleep_ratio: 120
INFO sync_time: : 3600
INFO sync_sleep_ratio: 120
I don't think this project is even maintained anymore -- bugs haven't been addressed in years.