Re: [Sshguard-users] Is sshguard working?

[<li...@la...>]

I added:
{fwcmd} add reset ip from 'table(22)' to me

When I restart the firewall, I get
/etc/rc.firewall: add: not found

Is this a syntax issue, or is the table not created?


  Original Message  
From: Kevin Zheng
Sent: Thursday, August 13, 2015 8:18 AM
To: ssh...@li...
Reply To: ssh...@li...
Subject: Re: [Sshguard-users] Is sshguard working?

On 08/12/2015 20:32, li...@la... wrote:
> I downloaded the development version. Running sshguard -v indicates 1.6.0.

You'll need to add a rule that looks something like this:

reset ip from table (22) to me

Keep in mind that 'ipfw' is a first-rule-wins firewall, which means that
if you have a rule that allows SSH connections, your SSHGuard rule must
have a higher rule number in order to block attacks. If you are adding
the rule from a shell, parenthesis must be escaped.

# ipfw add 50 reset ip from table \(22\) to me

Best,
Kevin Zheng

-- 
Kevin Zheng
kev...@gm... | ke...@kd... | PGP: 0xC22E1090

------------------------------------------------------------------------------
_______________________________________________
Sshguard-users mailing list
Ssh...@li...
https://lists.sourceforge.net/lists/listinfo/sshguard-users