sshguard-maintainers

[SSHGuard-maintainers] Call for testing and feedback for SSHGuard 2.0

[Kevin Z. <kev...@gm...>]

Hi there,

A lot of work to get SSHGuard working with new log sources (journalctl, 
macOS log) and backends (firewalld, ipset) has happened in 2.0.

The new version also uses a configuration file.

Some deprecated backends have been resurrected (hosts, ipfilter).

Most importantly, SSHGuard has been split into several processes piped 
into one another (sshg-logmon | sshg-parser | sshg-blocker | sshg-fw). 
sshg-parser can run with capsicum(4) and pledge(2). sshg-blocker can be 
sandboxed in its default configuration (without pid file, whitelist, 
blacklisting) and has not been tested sandboxed in other configurations.

The sshguard program is now a driver script that glues everything 
together. It's probably still a little fragile.

Some cleanup work remains. Documentation is also being updated.

I encourage package maintainers and people with suitable test 
environments to give the new code a shot and provide feedback.

The experimental code is available on SourceForge as 1.99.0 [1].

Thanks,
Kevin

[1] https://sourceforge.net/projects/sshguard/files/sshguard/1.99.0/

-- 
Kevin Zheng
kev...@gm... | ke...@be... | PGP: 0xC22E1090

Re: [SSHGuard-maintainers] [SSHGuard-users] Call for testing and feedback for SSHGuard 2.0

[jungle B. <jun...@gm...>]

Hi Kevin,
On Jan 2, 2017 2:19 PM, "Kevin Zheng" <kev...@gm...> wrote:
>
> Hi there,
>
> A lot of work to get SSHGuard working with new log sources (journalctl,
> macOS log) and backends (firewalld, ipset) has happened in 2.0.
>
> The new version also uses a configuration file.
>
> Some deprecated backends have been resurrected (hosts, ipfilter).
>
> Most importantly, SSHGuard has been split into several processes piped
> into one another (sshg-logmon | sshg-parser | sshg-blocker | sshg-fw).
> sshg-parser can run with capsicum(4) and pledge(2). sshg-blocker can be
> sandboxed in its default configuration (without pid file, whitelist,
> blacklisting) and has not been tested sandboxed in other configurations.
>

I'm going to give this a shot on that one host that had a problem. The OS
has been reinstalled so I'm hoping it will make a difference this time
around.

Can you point us to the latest documentation?

Thanks for your efforts, IMO, to make sshguard easier to use.

>
> The experimental code is available on SourceForge as 1.99.0 [1].
>
> Thanks,
> Kevin
>
> [1] https://sourceforge.net/projects/sshguard/files/sshguard/1.99.0/
>
> --
> Kevin Zheng
> kev...@gm... | ke...@be... | PGP: 0xC22E1090
>
>