From: Joe G. <jg...@ns...> - 2011-01-27 22:37:38
|
> Your logs seem to say that sshguard is not receiving those messages. > > Please try out the following possibilities: > > 1) replace "|/usr/local/sbin/sshguard" with "|exec /usr/local/sbin/sshguard" in syslog.conf (and reload) I just checked, both will work, with or without additional arguments/parameters to sshguard, on a FreeBSD 8.1R box. > 2) if you still see nothing, replace > "|/usr/local/sbin/sshguard" with "|tee -a /tmp/myfile | /usr/local/sbin/sshguard" (and reload) then > see with "tail -F /tmp/myfile" if log entries are actually received. That's probably the best advice; see what's happening to the data. Here, sshguard was one of those too-good-to-be-true gadgets - it just installed, ran, and functioned out of the box. We had to tweak it just a bit to avoid it getting paranoid about our NMS port checks, but that was it. ... JG -- Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net "We call it the 'one bite at the apple' rule. Give me one chance [and] then I won't contact you again." - Direct Marketing Ass'n position on e-mail spam(CNN) With 24 million small businesses in the US alone, that's way too many apples. |