Re: [Sshguard-users] RE : Errors when trying to add ipfw rules

[Jeff B. <sp...@ya...>]

--- Yves Guérin <yve...@ya...> wrote:
> Under which user the sshguard is running: ps auxwww
> Look into your securelevel for your kernel: man
> securelevel
> run the kernel below the 3rd level.

Thank you Yves!  It turns out that sshguard was
running under my profile.  I changed it to run under
root and now the rules do get added.

However, now there is a second (and I think common)
problem.  Sshguard adds its rules at 55000+, but the
Mac OS X firewall GUI adds rules at a lower number, so
sshguard's rules are bypassed.  I have no way of
changing Mac OS X's rules, so is there a way to change
the numbers that sshguard uses?

Or do you think it would be better for me to use a
different product instead of sshguard?  Maybe one that
uses hosts.deny (although my understanding was that
sshguard's approach was more secure).

Thanks for your help!


      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ