Re: [Sshguard-users] pure-ftpd protection not working

[Mij <mi...@ss...>]

Hi Ville,

Find here the list of generalised messages that sshguard is supposed to block:

http://www.sshguard.net/docs/reference/attack-signatures/

if your pure-ftpd logs show attacks in different formats, please submit a sample to

http://www.sshguard.net/support/attacks/submit/

Make sure to include sufficient log context around every attack line. More is better than less.

-m


On Nov 24, 2012, at 3:09 , Ville Walveranta <wal...@gm...> wrote:

> I have pure-ftpd 1.0.35-1 installed on Ubuntu 12.04 server along with sshguard 1.5-4.  sshguard is working perfectly with sshd – repeated login attempts are promptly blocked after five or so failed attempts.
> 
> But pure-ftpd logins are not.  Pure-ftpd is logging to /var/log/auth.log like sshd.  Do I need to change something in pure-ftpd configuration?  Perhaps use another log format (although I'm not sure if the format selected for AltLog affects the auth.log entries..)?
> 
> Thanks for any insights on this issue!
> 
> Ville Walveranta
> 
> ------------------------------------------------------------------------------
> Monitor your physical, virtual and cloud infrastructure from a single
> web console. Get in-depth insight into apps, servers, databases, vmware,
> SAP, cloud infrastructure, etc. Download 30-day Free Trial.
> Pricing starts from $795 for 25 servers or applications!
> http://p.sf.net/sfu/zoho_dev2dev_nov_______________________________________________
> Sshguard-users mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshguard-users