Re: [Sshguard-users] Blacklisting option causes 'exited with status 1'

[Jonathan G. <Jon...@ir...>]

Hello there:

We are running sshguard 1.5, with BSD 9.1, and pf .  When a violation occurs, instead of blacklisting the IP, we get 'logging subprocess ...  exited with status 1'.

In /etc/pf.conf:

table <sshguard> persist
block in quick on $ext_if proto tcp from <sshguard> to any port 22 label "ssh bruteforce"

In /etc/syslog.conf:

auth.info;authpriv.info     |exec /usr/local/sbin/sshguard  -b 5:/usr/local/etc/sshguard.db   -w /usr/local/etc/sshguard.whitelist


If we remove the -b option, sshguard works just fine.  However we would like to use the blacklisting feature.

Any help would be greatly appreciated.

Thank you.