sshguard-users

Re: [Sshguard-users] Blacklisting option causes 'exited with status 1'

[Jonathan G. <Jon...@ir...>]

Hello there:

We are running sshguard 1.5, with BSD 9.1, and pf .  When a violation occurs, instead of blacklisting the IP, we get 'logging subprocess ...  exited with status 1'.

In /etc/pf.conf:

table <sshguard> persist
block in quick on $ext_if proto tcp from <sshguard> to any port 22 label "ssh bruteforce"

In /etc/syslog.conf:

auth.info;authpriv.info     |exec /usr/local/sbin/sshguard  -b 5:/usr/local/etc/sshguard.db   -w /usr/local/etc/sshguard.whitelist


If we remove the -b option, sshguard works just fine.  However we would like to use the blacklisting feature.

Any help would be greatly appreciated.

Thank you.

Re: [Sshguard-users] Blacklisting option causes 'exited with status 1'

[Kevin Z. <kev...@gm...>]

Hi Jonathan,

On 12/09/2014 16:28, Jonathan Green wrote:
> We are running sshguard 1.5, with BSD 9.1, and pf .  When a violation
> occurs, instead of blacklisting the IP, we get ‘logging subprocess … 
> exited with status 1’.

It sounds like you're using FreeBSD, is that correct? If so, are you
using the sshguard from ports or compiling from source?

Thanks,
Kevin Zheng

-- 
Kevin Zheng
kev...@gm... | ke...@kd... | PGP: 0xC22E1090

Re: [Sshguard-users] Blacklisting option causes 'exited with status 1'

[Jonathan G. <Jon...@ir...>]

Yes, using from ports.

Thank you.

-----Original Message-----
From: Kevin Zheng [mailto:kev...@gm...] 
Sent: Tuesday, December 09, 2014 4:51 PM
To: ssh...@li...
Subject: Re: [Sshguard-users] Blacklisting option causes 'exited with status 1'

Hi Jonathan,

On 12/09/2014 16:28, Jonathan Green wrote:
> We are running sshguard 1.5, with BSD 9.1, and pf .  When a violation 
> occurs, instead of blacklisting the IP, we get 'logging subprocess ... 
> exited with status 1'.

It sounds like you're using FreeBSD, is that correct? If so, are you using the sshguard from ports or compiling from source?

Thanks,
Kevin Zheng

--
Kevin Zheng
kev...@gm... | ke...@kd... | PGP: 0xC22E1090

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
Sshguard-users mailing list
Ssh...@li...
https://lists.sourceforge.net/lists/listinfo/sshguard-users