SSHguard & IPFW

Michael B. Eichorn ike at michaeleichorn.com
Wed Sep 30 12:54:20 UTC 2015


On Wed, 2015-09-30 at 21:29 +0930, Shane Ambler wrote:
> On 29/09/2015 22:29, Michael B. Eichorn wrote:
> 
> > At a guess something happened to kick off sshguard without the rc
> > script,
> > but for most setups the rc script is the proper way to start
> > sshguard.
> > 
> > Is there any chance that you might have followed an old guide? In
> > sshguard < 1.5 a valid configuration option was to use syslog to
> > kickoff
> > sshguard and not use sshguard enable, but this is now depreciated in
> > favor of the new 'Log Sucker' introduced in v1.5.
> 
> No need for an old guide - using syslog instructions are given by the
> port.
> 
> cat /usr/ports/security/sshguard/files/pkg-message.in
> 
> #######################################################################
> ###
>    Sshguard installed successfully.
> 
> %%PKGMSG_FWBLOCK%%
> 
>    If you would like to use sshguard via syslogd, add an entry to your
>    /etc/syslog.conf like the following:
> 
>      auth.info;authpriv.info     |exec %%PREFIX%%/sbin/sshguard
> 
>    and use "/etc/rc.d/syslogd reload" to activate it. Note, you can add
>    additional arguments to the sshguard command if you so desire.
> 
>    Alternatively, you can also start sshguard as a daemon by using the
>    rc.d script installed at %%PREFIX%%/etc/rc.d/sshguard .
> 
>    See sshguard(8) and http://sshguard.sourceforge.net for additional
> info.
> #######################################################################
> ###
> 
> 

Nice catch, just filed PR #203452 to get that updated.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5761 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20150930/379720c0/attachment.bin>


More information about the freebsd-questions mailing list