Re: [SSHGuard-users] Failed to block

[<li...@la...>]

Can yo‎u elaborate a bit more. I gather the idea is for sshguard not to start until ipfw is running. How is that enforced under freebsd? Shouldn't that already be set up in the script for the daemon? 

  Original Message  
From: Mark Felder
Sent: Monday, August 1, 2016 12:53 PM
To: Jos Chrispijn
Cc: ssh...@li...
Subject: Re: [SSHGuard-users] Failed to block


> On Aug 1, 2016, at 14:24, Jos Chrispijn <ssh...@cl...> wrote:
> 
> In een bericht van 1-8-2016 20:50:
> 
>> I'll hazard a guess that SSHGuard is being started before the firewall
>> has been brought up.
>> 
>> Can you try adding 'ipfw' to the REQUIRE line in
>> /usr/local/etc/rc.d/sshguard and testing again?
> 
> I will and let you know, thanks.
> 
> BR, Jos
> 


Also check the order of services with "service -r" command. That will help identify what the system thinks the service order is going to be. We should probably add ipfw and pf to the REQUIRE line regardless.


--
Mark Felder
ports-secteam member
fe...@Fr...


------------------------------------------------------------------------------
_______________________________________________
sshguard-users mailing list
ssh...@li...
https://lists.sourceforge.net/lists/listinfo/sshguard-users