|
From: Kuroro <inf...@gm...> - 2007-03-13 17:27:42
|
Hi all.
I installed sshguard on Open suse. by
./configure --prefix=/usr --with-firewall=iptables
make
su - root
make install
i add
iptables -N sshguard
iptables -A INPUT -p tcp --dport 22 -j sshguard
chmod +s /usr/sbin/sshguard
then i edit
/etc/syslog-ng/syslog-ng.conf
concatenate
filter sshlogs { facility(authpriv) and match(ssh); };
destination sshguardproc { program("/usr/sbin/sshguard"); };
log { source(src); filter(sshlogs); destination(sshguardproc); };
killall -HUP syslog-ng
ln -s /usr/sbin/ip* /sbin/
then i ssh with the wrong password 3 times and it does sshguard does not
start automatically nor it blocks ip. I started sshguard manually with -a 2
-p 3& and it starts but it does not block ips.
After i tried it on a redhat 3.0 AS test server. with a few variations to
the configuration but again it did not start the sshguard nor it blocked the
ip.
Did i missed anything on the configuration?
Any help is appreciated.
Giovanni
|