Re: [Sshguard-users] Parser changes for FreeBSD

[AngryWolf <ang...@fl...>]

Hi,

I have the same problem. My hostname starts with a number so break attempts 
aren't catched. Example:

[root@123456 ~]# sshguard
Dec 31 10:08:06 123456 sshd[62382]: Invalid user test from 202.130.138.94
Dec 31 10:08:06 123456 sshd[62382]: Invalid user test from 202.130.138.94
Dec 31 10:08:06 123456 sshd[62382]: Invalid user test from 202.130.138.94
Dec 31 10:08:06 123456 sshd[62382]: Invalid user test from 202.130.138.94
Dec 31 10:08:06 123456 sshd[62382]: Invalid user test from 202.130.138.94
Dec 31 10:08:06 123456 sshd[62382]: Invalid user test from 202.130.138.94

Nothing happened, however changing '123456' to 'localhost' in the keyboard 
input works:

[root@123456 ~]# sshguard
Dec 31 10:08:06 localhost sshd[62382]: Invalid user test from 202.130.138.94
Dec 31 10:08:06 localhost sshd[62382]: Invalid user test from 202.130.138.94
Dec 31 10:08:06 localhost sshd[62382]: Invalid user test from 202.130.138.94
Dec 31 10:08:06 localhost sshd[62382]: Invalid user test from 202.130.138.94
55006 deny ip from 202.130.138.94 to me

I'm using sshguard-ipfw-1.0_1 on FreeBSD 6.3-PRERELEASE.

-- 
AngryWolf
ang...@fl...