SSHguard & IPFW
Michael B. Eichorn
ike at michaeleichorn.com
Wed Sep 30 12:54:20 UTC 2015
On Wed, 2015-09-30 at 21:29 +0930, Shane Ambler wrote:
> On 29/09/2015 22:29, Michael B. Eichorn wrote:
>
> > At a guess something happened to kick off sshguard without the rc
> > script,
> > but for most setups the rc script is the proper way to start
> > sshguard.
> >
> > Is there any chance that you might have followed an old guide? In
> > sshguard < 1.5 a valid configuration option was to use syslog to
> > kickoff
> > sshguard and not use sshguard enable, but this is now depreciated in
> > favor of the new 'Log Sucker' introduced in v1.5.
>
> No need for an old guide - using syslog instructions are given by the
> port.
>
> cat /usr/ports/security/sshguard/files/pkg-message.in
>
> #######################################################################
> ###
> Sshguard installed successfully.
>
> %%PKGMSG_FWBLOCK%%
>
> If you would like to use sshguard via syslogd, add an entry to your
> /etc/syslog.conf like the following:
>
> auth.info;authpriv.info |exec %%PREFIX%%/sbin/sshguard
>
> and use "/etc/rc.d/syslogd reload" to activate it. Note, you can add
> additional arguments to the sshguard command if you so desire.
>
> Alternatively, you can also start sshguard as a daemon by using the
> rc.d script installed at %%PREFIX%%/etc/rc.d/sshguard .
>
> See sshguard(8) and http://sshguard.sourceforge.net for additional
> info.
> #######################################################################
> ###
>
>
Nice catch, just filed PR #203452 to get that updated.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5761 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20150930/379720c0/attachment.bin>
More information about the freebsd-questions
mailing list