From: Kuroro <inf...@gm...> - 2007-03-13 17:27:42
|
Hi all. I installed sshguard on Open suse. by ./configure --prefix=/usr --with-firewall=iptables make su - root make install i add iptables -N sshguard iptables -A INPUT -p tcp --dport 22 -j sshguard chmod +s /usr/sbin/sshguard then i edit /etc/syslog-ng/syslog-ng.conf concatenate filter sshlogs { facility(authpriv) and match(ssh); }; destination sshguardproc { program("/usr/sbin/sshguard"); }; log { source(src); filter(sshlogs); destination(sshguardproc); }; killall -HUP syslog-ng ln -s /usr/sbin/ip* /sbin/ then i ssh with the wrong password 3 times and it does sshguard does not start automatically nor it blocks ip. I started sshguard manually with -a 2 -p 3& and it starts but it does not block ips. After i tried it on a redhat 3.0 AS test server. with a few variations to the configuration but again it did not start the sshguard nor it blocked the ip. Did i missed anything on the configuration? Any help is appreciated. Giovanni |