Re: sshd logging with key-only authentication

2010-07-09 Thread Glen Barber
On 7/8/10 11:13 PM, David Adam wrote: On Thu, 8 Jul 2010, Glen Barber wrote: On 7/8/10 10:24 PM, David Adam wrote: On Thu, 8 Jul 2010, Glen Barber wrote: What caught my interest is if I attempt to log in from a machine where I do not have my key or an incorrect key, I see nothing logged in

sshd logging with key-only authentication

2010-07-08 Thread Glen Barber
Hi, I've been seeing quite a bit of ssh bruteforce attacks which appear to be dictionary-based. That's fine; I have proper measures in place, such as key-only access, bruteforce tables for PF, and so on; though some of the attacks are delaying login attempts, bypassing the bruteforce rules,

Re: sshd logging with key-only authentication

2010-07-08 Thread Glen Barber
On 7/8/10 10:24 PM, David Adam wrote: On Thu, 8 Jul 2010, Glen Barber wrote: I've been seeing quite a bit of ssh bruteforce attacks which appear to be dictionary-based. That's fine; I have proper measures in place, such as key-only access, bruteforce tables for PF, and so on; though some of

Re: sshd logging with key-only authentication

2010-07-08 Thread David Adam
On Thu, 8 Jul 2010, Glen Barber wrote: I've been seeing quite a bit of ssh bruteforce attacks which appear to be dictionary-based. That's fine; I have proper measures in place, such as key-only access, bruteforce tables for PF, and so on; though some of the attacks are delaying login

Re: sshd logging with key-only authentication

2010-07-08 Thread David Adam
On Thu, 8 Jul 2010, Glen Barber wrote: On 7/8/10 10:24 PM, David Adam wrote: On Thu, 8 Jul 2010, Glen Barber wrote: What caught my interest is if I attempt to log in from a machine where I do not have my key or an incorrect key, I see nothing logged in auth.log about a failed login

Re: sshd logging with key-only authentication

2010-07-08 Thread David Wolfskill
On Thu, Jul 08, 2010 at 07:42:15PM -0400, Glen Barber wrote: ... What caught my interest is if I attempt to log in from a machine where I do not have my key or an incorrect key, I see nothing logged in auth.log about a failed login attempt. If I attempt with an invalid username, as

SSHd logging

2000-07-21 Thread Dan Larsson
What do knobs do I need to turn to make sshd log to syslog (or any log for that matter)? Regards +-- Dan Larsson | Tel: +46 8 550 120 21 Tyfon Svenska AB | Fax: +46 8 550 120 02 Public PGP keys | finger [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with