Re: [SSHGuard-users] Block after one attack

[Kevin Z. <kev...@gm...>]

On 08/29/2016 13:07, mai...@ne... wrote:
> maybe I did something stupid and I am not able to find the reason but after upgrading to SSHGuard 1.7.0 SSH is blocked after one wrong password input.
> 
> 
> Aug 29 21:52:27 abv sshguard[80566]: 91.10.95.96: blocking for 1200 secs (1 attacks in 0 secs, after 1 abuses over 0 secs)
> 
> sshguard_enable="YES"
> sshguard_safety_threshold="8"

sshguard_safety_threshold isn't read from the rc.d script.

> sshguard_danger_thresh="10"

This is your issue. The default is 30 (3 attempts).

Best,
Kevin

-- 
Kevin Zheng
kev...@gm... | ke...@be... | PGP: 0xC22E1090