How to have sshd log IP numbers instead of reverse lookups
Lowell Gilbert
freebsd-questions-local at be-well.ilk.org
Sat Nov 26 15:13:10 GMT 2005
James Long <list at museum.rain.com> writes:
> I was looking at /var/log/auth.log and saw an entry of the form:
>
> Nov 24 18:41:37 ns sshd[58083]: error: PAM: authentication error for username from example.com
>
> I wish to have an IP number logged where sshd has instead logged
> 'example.com'
>
> Reading sshd's man page and sshd_config's man page, I don't find any
> way to control this.
>
> Since 'example.com' could have multiple IP numbers, how can I change
> sshd's configuration to log the IP number from whence the
> authentication error originated?
If I recall correctly, those messages should be associated with other
messages about the host connecting, which would include the IP
address.
More information about the freebsd-questions
mailing list