[Sshguard-users] Errors when trying to add ipfw rules

[Jeff B. <sp...@ya...>]

Hi everyone,

I just installed sshguard 1.0 on my Mac running OS X
10.4.9.  Sshguard seems to run just fine, but it fails
when trying to add rules to ipfw.  This is the error:

ipfw: socket: Operation not permitted

And this is what is logged:

Apr 14 10:11:08 G3 sshguard[378]: Started successfully
[(a,p,s)=(4, 420, 1200)], now ready to scan.
Apr 14 10:11:25 G3 sshguard[378]: Blocking 127.0.0.1:
4 failures over 5 seconds.\n
Apr 14 10:11:25 G3 sshguard[378]: Blocking command
failed. Exited: 17664
Apr 14 10:20:52 G3 sshguard[378]: Releasing 127.0.0.1
after 567 seconds.\n
Apr 14 10:20:52 G3 sshguard[378]: could not get back
rule ID for address 127.0.0.1
Apr 14 10:20:52 G3 sshguard[378]: Release command
failed. Exited: -1

I'm not an expert with *nix permissions, but this is
how the sshguard executable is listed via ls:

-rwxr-xr-x   1 root  wheel  52924 Apr 14 05:03
sshguard

So I would think that it would have authority to write
out to ipfw.  I also tried running sshguard via sudo
but it gets the same error.  Any ideas how to fix
this?

Thanks!


      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ