Re: [Sshguard-users] sshguard error messages in auth.log

[Mij <mi...@ss...>]

> Mar 15 00:30:12 xxx sshguard[1547]: Blocking command failed. Exited: -1
> Mar 15 00:42:05 xxx sshguard[1547]: Release command failed. Exited: -1
> 
> Mar 16 15:54:00 tigerwalk sshguard[1534]: While blocking blacklisted 
> addresses, the firewall refused to block!

Most often this happens up to permission issues. But in your "uwf" case:
have you actually performed the necessary firewall setup?

See http://www.sshguard.net/docs/setup/firewall/netfilter-iptables/


> In addition to these three error messages I can see that the software is 
> correctly blacklisting several IP addresses.  My question is what to do 
> about the above errors?

You can get a more detailed failure description by enabling debug mode, see
http://www.sshguard.net/docs/faqs/#debugging


> My system is running the 'ufw' firewall but sshguard is configured to 
> use iptables.

If uwf is only a front-end to iptables, then refer to the "netfilter/iptables" docs.
SSHGuard will work behind the frontend's curtain.