Yes, that is likely be the problem.  If you delete lines from the log 
file it will reduce the file size.  DH depends on the size to determine 
if the logfile is new (ie. has just been rotated) or if it is the same 
one as before.  As an example, if the file was 10,000 bytes, DH records 
that.  Now, after deleting some lines the file is now 9000 bytes.  When 
DH starts it will consider the file to be new (since it's size is less 
than the last one it looked at) and parse it from the beginning.  If the 
log file increases in size, this isn't a problem.

Phil

René Berber wrote:
> Joop Beris wrote:
> 
>> I have a question about how to remove a certain host from the blocking
>> process. I have followed the documented procedure as I have found it on
>> the website and explained here on the mailing list archive, and I think I
>> did everything the right way, yet the host is still automatically added to
>> /etc/hosts.deny.
> 
> Easy way out: add your work IP to /etc/hosts.allow, with the proper 
> syntax of course.
> 
>> Background:
>> I have installed denyhosts on an openSUSE 10.3 machine and it works
>> nicely. This machine is my home machine, and I like to connect to it from
>> work. However, I recently managed to lock myself out from work, while
>> testing denyhosts.
>> Of course, I would now like to unblock my IP from work, but no such luck.
>> What I have done to achieve this:
>>
>> - Stop de denyhosts daemon.
>> - Remove the host from /etc/hosts.deny
>> - Added the host to /[WORK-DIR]/allowed-hosts
>> - Removed the host from all other files in /[WORK-DIR]
>> - Removed the offending lines from the syslog so it would not be picked up
>> again by denyhosts
> 
> This step may be the problem: if you manually change the log file 
> denyhosts detects that it changed and scans it again.
> 
>> - Started the denyhosts daemon
>>
>> I was under the impression that this would prevent my host from being
>> blocked, but unfortunately, the next time the daemon completes its run, it
>> is added again to /etc/hosts.deny.
>>
>> What am I doing wrong?
> 
> Where did you see the step that changes the log?  If it is in the FAQ, I 
> think it should be corrected.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Denyhosts-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/denyhosts-user

Reply via email to