From: Mij <mi...@ss...> - 2011-10-03 15:44:27
|
Ciao Pietro, On Apr 27, 2011, at 23:25 , Pietro Leone wrote: > I do not understand how logsucker works, if I do not provide any log files > throught "-l" option ssh work with defaults log files? No, it defaults to standard input. > I tried launching sshguard in rc.local: > > /usr/local/sbin/sshguard -l /var/log/authlog -l /var/log/secure > > How can I be sure that sshguard is working? SSHGuard logs some messages at start-up, you can grep your logs e.g. for "Started successfully". They are all LOG_AUTH facility, which syslog typically sends to /var/log/auth* > But sshguard does not block any address. > > How can I do? For further details see http://www.sshguard.net/docs/faqs/#does-not-work . |