getting pam to put the ip address in the log

Michael Grant mgrant at
Tue Aug 19 12:12:04 UTC 2008

On Tue, Aug 19, 2008 at 2:02 PM, Michael Grant <mgrant at> wrote:

> Recently I have been seeing lots of connections to my sshd trying to guess
> passwords.  One thing I noticed was the hostname reported in the auth.log
> without reverse dns.  sshd never puts in the ip address, this is all I see:
> sshd[14450]: error: PAM: authentication error for illegal user access from
> Is it possible to get pam or sshd or whatever is ultimatly logging this to
> put the ip address in the log so I can see where this is really coming from?
> Michael Grant

Ths seems to work:

Put this in /etc/ssh/sshd_config:

UseDNS no

More information about the freebsd-questions mailing list