Re: [Sshguard-users] blacklisting IPs that are whitelisted

[Kevin Z. <kev...@gm...>]

On 07/23/2015 18:24, @lbutlr wrote:
> SSHGuard version sshguard-1.5_12

The latest version from ports is 1.6.0.

> whitelist: add '230.240.250.260' as plain IPv4. whitelist: add plain
> IPv4 230.240.250.260. whitelist: add '230.240.250.261' as plain
> IPv4. whitelist: add plain IPv4 230.240.250.261. whitelist: add
> '127.0.0.1' as plain IPv4. whitelist: add plain IPv4 127.0.0.1. 

Are the correct addresses whitelisted?

> the behavior has changed since yesterday. Over 1200 IPs are listed in
> /etc/hosts.deny and /etc/hosts.allow is empty. Something else is
> going on here, right?

I'm not very familiar with the 'hosts' backend, so I'm not sure. I
believe SSHGuard should only be making changes to one file, which is set
at compile time.

I'd be interested to hear if you find out what's going on.

Thanks,
Kevin Zheng

-- 
Kevin Zheng
kev...@gm... | ke...@kd... | PGP: 0xC22E1090