Re: [SSHGuard-users] Failed to block

[Kevin Z. <kev...@gm...>]

On 08/01/2016 11:08, Jos Chrispijn wrote:
>> Ahh, so you're running 1.6.4 from ports? How are you starting SSHGuard?
>> Via the rc.d script or syslog?
> 
> sshguard_enable="YES"
> sshguard_blacklist="40:/var/db/sshguard/blacklist.db"
> sshguard_whitelistfile="/usr/local/etc/sshguard.whitelist"
> 
>> Does this message only appear when the machine is starting up?
> Yes that is correct. Only then (not on the system prompt after)
> 
> Does it show up when you restart SSHGuard without restarting the system?
> Nope

I'll hazard a guess that SSHGuard is being started before the firewall
has been brought up.

Can you try adding 'ipfw' to the REQUIRE line in
/usr/local/etc/rc.d/sshguard and testing again?

Best,
Kevin

-- 
Kevin Zheng
kev...@gm... | ke...@be... | PGP: 0xC22E1090