getting pam to put the ip address in the log

[Michael Grant]

On Tue, Aug 19, 2008 at 2:02 PM, Michael Grant <mgrant at grant.org> wrote:

> Recently I have been seeing lots of connections to my sshd trying to guess
> passwords.  One thing I noticed was the hostname reported in the auth.log
> without reverse dns.  sshd never puts in the ip address, this is all I see:
>
> sshd[14450]: error: PAM: authentication error for illegal user access from
> host1.xxx.br
>
> Is it possible to get pam or sshd or whatever is ultimatly logging this to
> put the ip address in the log so I can see where this is really coming from?
>
> Michael Grant
>

Ths seems to work:

Put this in /etc/ssh/sshd_config:

UseDNS no