At 10:00 PM -0700 8/16/07, David Liontooth sent email regarding 
[Denyhosts-user] Installing on OSX 10.4 -- /etc/hosts.deny?:
>On the Mac OSX 10.4 system I'm installing denyhosts on, there's no
>/etc/hosts.deny.
>I created one, and denyhosts starts fine, and populates from the log.
>What I don't know yet is whether it will block as intended -- can
>someone tell me?

I'm currently using /etc/hosts.deny on OS X 10.4.10 and it does 
indeed work. At least proftpd checks it. I'm pretty sure sshd does as 
well. If you'd like to know for sure, try to ssh to 24.119.59.5 
multiple times and let me know if it stops accepting your connections 
at some point. Email me with your IP and I'll watch for it. (And 
remove it after the test.)

>
>There's also a /var/etc/ directory -- what's the difference? Are they
>mirrored?

Other apps put their settings there. DenyHosts does not.

>
>I usually work on Linux, and am just doing a friend a favor setting this
>up on OSX.
>
>BTW on my system it's /var/log/secure.log that contains the ssh log, not
>asl.

But the IPs of the offending hosts are not logged to secure.log on 
10.4 and they were on 10.3.x. DenyHosts needs to be monitoring 
asl.log if you are really on 10.4.x.

If you check secure.log, you'll see that the notices of failed 
attempts do not include the IPs. These are logged to asl.log on 
10.4.x.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Denyhosts-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/denyhosts-user

Reply via email to