Re: [SSHGuard-users] sshguard restart loop when using syslogd

[Jef P. <je...@ma...>]

I wrote:
>I'm on FreeBSD 10.1R. I installed it from /usr/ports/security/sshguard
>which gave me version 1.5 - no problems on the install.

After a reminder that portsnap exists, I updated everything and
tried again with sshguard 1.6.4. I undid my syslog config quick-fix
to test, and can confirm that the restart looping still happens
although with different log messages:

May  9 11:57:02 hydra sshguard[22878]: Monitoring attacks from stdin
May  9 12:00:00 hydra sshguard[22878]: Received EOF from stdin
May  9 12:00:00 hydra sshguard[22878]: Exiting on signal
May  9 12:00:00 hydra sshguard[28419]: Monitoring attacks from stdin

Looks like the exit message is now logged at level info instead
of notice, but that is still high enough to get caught by the
recommended syslog.conf line. And anyway the new 'Received EOF'
message is at level notice.
---
Jef

         Jef Poskanzer  je...@ma...  http://acme.com/jef/