sshguard-users

[Sshguard-users] fedora21 systemd and journalctl with sshguard

[Jason M <jk...@gm...>]

I upgraded fedora13 to fedora21 and am having a difficulty setting up the
sshguard.  Unlike fedora13, fedora21 uses systemd and journalctl, and I
need some guide how to set up the sshguard.  I downloded and compiled
sshguard 1.5 version since I could not find the 64bit rpm version for
fedora21.

Thank you very much.

Re: [Sshguard-users] fedora21 systemd and journalctl with sshguard

[Kevin Z. <kev...@gm...>]

On 05/12/2015 15:17, Jason M wrote:
> I upgraded fedora13 to fedora21 and am having a difficulty setting up
> the sshguard.  Unlike fedora13, fedora21 uses systemd and journalctl,
> and I need some guide how to set up the sshguard.  I downloded and
> compiled sshguard 1.5 version since I could not find the 64bit rpm
> version for fedora21.

Does Fedora ship with startup scripts for SSHGuard? If so, you're
probably better off using those.

If your logs go to files, this is what you can do:

# sshguard -l /var/log/auth.log -l /other/log/files

If not, I don't know enough about systemd and journalctl to help.

Best,
Kevin Zheng

-- 
Kevin Zheng
kev...@gm... | ke...@kd... | PGP: 0xC22E1090

Re: [Sshguard-users] fedora21 systemd and journalctl with sshguard

[James H. <jam...@gm...>]

I use sshguard on FC 21. Below is the systemd unit file I use. You should
copy it to /etc/systemd/system/sshguard.service. Edit the ExecStart lineto
use the command line you want, be sure to use the correct path to sshguard,
yours might be /usr/local/sbin/sshguard
Then make sure the running systemd finds the new file ala "systemctl
daemon-reload'. You can start sshguard just once with 'systemctl start
sshguard' and use 'systemctl status sshguard' to verify it loaded without
problems. To have systemd start sshguard on boot use 'systemctl enable
sshguard'.

systemd is much more complicated than bsd init or sysv init, but it really
does have some useful features. As you can see this unit file will restart
the daemon should it exit or crash. Systemd is also integrated with
containers allowing it to easily start each daemon in an isolated
environment.


#
# sshguard systemd unit
#
#

[Unit]
Description=Ssh Guard dynamic firewall against brute force attempts
After=syslog.target
After=iptables.target
After=ip6tables.target
After=libvirtd.service
After=firewalld.service

[Service]
ExecStart=/usr/sbin/sshguard -w /etc/sshguard.whitelist -l /var/log/secure
-b 60:/var/db/sshguard/blacklist.db
Restart=always

[Install]
WantedBy=multi-user.target





On Tue, May 12, 2015 at 1:17 PM, Jason M <jk...@gm...> wrote:

> I upgraded fedora13 to fedora21 and am having a difficulty setting up the
> sshguard.  Unlike fedora13, fedora21 uses systemd and journalctl, and I
> need some guide how to set up the sshguard.  I downloded and compiled
> sshguard 1.5 version since I could not find the 64bit rpm version for
> fedora21.
>
> Thank you very much.
>
>
>
> ------------------------------------------------------------------------------
> One dashboard for servers and applications across Physical-Virtual-Cloud
> Widest out-of-the-box monitoring support with 50+ applications
> Performance metrics, stats and reports that give you Actionable Insights
> Deep dive visibility with transaction tracing using APM Insight.
> http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
> _______________________________________________
> Sshguard-users mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshguard-users
>
>


-- 
James Harris
Software Engineer
jam...@gm...