How to have sshd log IP numbers instead of reverse lookups

Lowell Gilbert freebsd-questions-local at be-well.ilk.org
Sat Nov 26 15:13:10 GMT 2005


James Long <list at museum.rain.com> writes:

> I was looking at /var/log/auth.log and saw an entry of the form:
> 
> Nov 24 18:41:37 ns sshd[58083]: error: PAM: authentication error for username from example.com
> 
> I wish to have an IP number logged where sshd has instead logged
> 'example.com'
> 
> Reading sshd's man page and sshd_config's man page, I don't find any
> way to control this.
> 
> Since 'example.com' could have multiple IP numbers, how can I change 
> sshd's configuration to log the IP number from whence the 
> authentication error originated?

If I recall correctly, those messages should be associated with other
messages about the host connecting, which would include the IP
address. 


More information about the freebsd-questions mailing list