[Sshguard-users] sshguard & proftpd issues - continued

[Lego <le...@bl...>]

First I would like to say thanks to David Horn for helping so far; This is
a continuation of my last thread.  I now successfully have sshguard 1.4
installed and blocking sshd & dovecot again, But still Having issues with
proftpd.

[code]
Nov 20 14:12:09 blurr-ink proftpd[1382]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - USER lego (Login failed):
Incorrect password.
Nov 20 14:12:09 blurr-ink proftpd[1382]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - FTP session closed.
Nov 20 14:12:24 blurr-ink proftpd[1385]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - USER lego (Login failed):
Incorrect password.
Nov 20 14:12:24 blurr-ink proftpd[1385]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - FTP session closed.
Nov 20 14:12:40 blurr-ink proftpd[1386]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - USER lego (Login failed):
Incorrect password.
Nov 20 14:12:40 blurr-ink proftpd[1386]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - FTP session closed.
Nov 20 14:13:19 blurr-ink proftpd[1455]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - USER lego (Login failed):
Incorrect password.
Nov 20 14:13:19 blurr-ink proftpd[1455]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - FTP session closed.
Nov 20 14:13:34 blurr-ink proftpd[1456]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - USER lego (Login failed):
Incorrect password.
Nov 20 14:13:34 blurr-ink proftpd[1456]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - FTP session closed.
Nov 20 14:13:50 blurr-ink proftpd[1457]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - USER lego (Login failed):
Incorrect password.
Nov 20 14:13:50 blurr-ink proftpd[1457]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - FTP session closed.
Nov 20 14:14:06 blurr-ink proftpd[1460]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - USER lego (Login failed):
Incorrect password.
Nov 20 14:14:06 blurr-ink proftpd[1460]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - FTP session closed.
Nov 20 14:14:30 blurr-ink proftpd[1464]: localhost
(dyn216-8-133-228.ADSL.mnsi.net[216.8.133.228]) - USER lego: Login
successful.
[/code]

My syslog.conf
[code]
auth.info;authpriv.info;ftp.info;mail.info     |exec
/usr/local/sbin/sshguard -f 310:/var/run/proftpd.pid -f
100:/var/run/sshd.pid -f 210:/var/run/dovecot/master.pid -w 127.0.0.1 -a 5
auth.info;authpriv.info;ftp.info;mail.info       /var/log/sshguard.log
[/code]


As I said I have been able to block myself when attemping to log in to sshd
or dovecot, but when I try to Log into ftp with incorrect credentials it
still just lets me keep trying over and over.

-- 
Sincerely,

Lego