SSHgaurd and PF

Justin V. vic at
Tue Nov 2 18:25:07 UTC 2010

On Tue, 2 Nov 2010, Rob Farmer wrote:

> On Tue, Nov 2, 2010 at 10:40, Justin V. <vic at> wrote:
>> Actually this was installed after the port completed:
>> yeaguy# grep sshg /etc/syslog.conf
>>;     |exec /usr/local/sbin/sshguard
>> But it is not exactly what the HOWTO ways, the HOWTO does not mention the
>> "exec" part.
> Could be that the docs are written for Linux or another version of
> syslog. The port and the man page say include the exec, so I would go
> with that.
>> Put this line high into this file:
>>;    |/usr/local/sbin/sshguard
> Ok - if that isn't working, then check to see if your ftp server is
> logging to syslog under auth or authpriv. If not you'll need to change
> the setup to get the logs from the right place.
> -- 
> Rob Farmer
> _______________________________________________
> freebsd-questions at mailing list
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at"

I do not see ftp going to auth:

yeaguy# grep -i  pure /var/log/auth.log
yeaguy# grep -i ftp /var/log/auth.log
Oct 30 07:36:49 yeaguy sshd[74718]: subsystem request for sftp
Oct 30 08:37:25 yeaguy sshd[74942]: subsystem request for sftp
Oct 30 08:51:20 yeaguy sshd[74984]: subsystem request for sftp
Oct 30 12:49:04 yeaguy sshd[2301]: subsystem request for sftp
Oct 30 12:49:56 yeaguy sshd[2308]: subsystem request for sftp
Nov  2 08:44:42 yeaguy sshd[17190]: subsystem request for sftp
Nov  2 08:46:14 yeaguy sshd[17241]: subsystem request for sftp

But I dont have pure-ftp looking at pam so that makes sense right?
Probably wouldnt show  up there then? I am doing virtual user for

Here is the passwd db for pure:

yeaguy# grep pure /etc/inetd.conf
ftp  stream tcp nowait root /usr/local/sbin/pure-ftpd pure-ftpd -l

so i need to pipe the pure db to auth?



More information about the freebsd-questions mailing list