Re: [SSHGuard-users] Can't Get it to work

[Kevin Z. <kev...@gm...>]

On 06/25/2018 13:24, Bob Wooldridge wrote:
> I have sshguard version 2.1.0 installed on Devuan 2.0 (a debian variant
> without systemd).  I am running sshd under daemon tools and using
> multilog, but auth.log also registers failed attempts. I have also set
> up sshguard to run under daemontools.  Here is my run script:
> 
>> #!/bin/sh
>>
>> export SSHGUARD_DEBUG=1
>> exec 2>&1
>> exec /usr/local/sbin/sshguard
> 
> I have tried configuring the sshgaurd.conf file to watch auth.log or the
> sshd multilog which I put in /var/log/sshd/current.  In the
> /usr/local/etc/sshguard.conf file I set the FILE variable to
> /var/log/sshd/current.  When I run sshgaurd, the output is this:
> But when I try to login with bad password sshguard does not seem to
> recognize it.  There is nothing in the sshguard log.
> 
> What am I doing wrong??

Could you paste a few examples of lines from your /var/log/sshd/current
that should be detected? I could be that it just doesn't recognize the
log messages on your system.

The "trap: SIGINT: bad trap" is a bug that has since been fixed but
probably isn't the one causing issues for you.

What did you run to generate that iptables output, or did that just show
up by itself?

-- 
Kevin Zheng
kev...@gm... | ke...@be... | PGP: 0xC22E1090