Re: [SSHGuard-users] patch with parser for Proxmox VE auth failures

[Jos C. <ssh...@cl...>]

Hi Kev,

Hope you are well.
Just upgrade FreeBSD to 13.5-RELEASE and got this error after running

%> pkg check -d sshguard

Checking sshguard: 100%
sshguard is missing a required shared library: libcap_net.so.1

Can remember we had this issue earlier but disappeared in BSD 13.4

Can you offer an workaround?

Thanks and keep up the good work!
Best, Jos

Jos Chrispijn:
> Hi, thank you both.
>
> Best regards,
> Jos
>
> Kevin Zheng:
>> Hi Christoph,
>>
>> Thanks for the patch. Happy to include this attack signature for 
>> Proxmox VE in SSHGuard.
>>
>> I'm glad you found the documentation useful.
>>
>> I made a small adjustment to your patch. In attack_scanner.l the 
>> attack signatures for the "unknown user" case overlap with those for 
>> the known user, so everything still works when I remove the two lines 
>> for the unknown user case.
>>
>> I've committed this and this will be available in the next release.
>>
>> Thanks again for your contribution!
>

Best regards,
Jos