bruteforceblocker + PF
Enrique Ayesta Perojo
eayesta at portugalete.uned.es
Fri Oct 7 01:20:35 PDT 2005
El Osteguna 06 Urria 2005 21:56, Noel Jones escribió:
> I manually installed bruteforceblocker 1.1 (later noticed it's in
> ports/security) and when it starts, it looks like:
> ------- log started at Wed Oct 5 13:13:01 2005 -------
>
> So it appears that your software is different from mine.
No, it's the same version, it's the one of the ports, the change in the
symbols !!!!! was made by us.
> Are you also seeing sshd logging information about failed and accepted
> login attempts?
Yes, i can see all the login attempts
> One thing I did notice was that all the lines in the
> bruteforceblocker.pl script ended with ^M. So I used vi to remove
> them. I don't know if that is part of your problem or not, but it's
> something you might check.
Yes, i made the same when i installed the port
> FWIW, after making the suggested change to my syslog.conf file and
> editing the file locations in the bruteforceblocker.pl script, it
> worked first try here. The only other suggestion I have is to check
> your /etc/syslog.conf changes.
> Find the line that looks like:
> auth.info;authpriv.info /var/log/auth.log
> and change it to:
> auth.info;authpriv.info | exec
> /usr/local/bin/bruteforceblocker.pl
Also done :(
Thanks for your help!
More information about the freebsd-questions
mailing list