Re: [Sshguard-users] SSH Guard: Blocking failed without any errors?

[Mij <mi...@ss...>]

Hi Paul

> I absolutely love SSH Guard: easy to configure and (until now) reliable.

Thanks!


> I configured Netfiler/iptables the following way (snippets to keep it small):
> 
> 
> 		Chain INPUT (policy DROP)
> 		...
> 		sshguard   all  --  anywhere             anywhere    
> 
> 		...
> 
> 		Chain sshguard (1 references)
> 		target     prot opt source               destination

Your chain INPUT is "policy DROP". If SSH otherwise responds on network, this means
you probably have a rule above of the sshguard rule going "allow SSH to everyone", making
effectively irrelevant the sshguard rule.

If that is not the case, please post the full "iptables -L" output as taken right after a "Block" has
been made.