My hosts.allow looks like this:
sshd: 10.1.0.0/255.255.0.0: severity notice: ALLOW
sshd: ALL: severity alert: DENY
ALL: ALL: severity notice: ALLOW
My problem was not actually a ssh problem but rather a syslog problem.
I had multiple entries on one line in my syslog.conf. It looked like this:
local0.notice;local0.err;local0.debug /var/adm/services.notice
When I changed it to:
local0.notice
/var/adm/services.notice
Logging began to work.
Thanks!
Eric
-----Original Message-----
From: Carl J. Nobile [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 03, 2000 7:54 AM
To: Eric Bonner
Cc: [EMAIL PROTECTED]
Subject: RE: Logging Successful SSH1 and SSH2 connects
Hi Eric,
Did you add the name of the ssh daemon to your /etc/hosts.allow file?
Carl
On 02-Nov-00 Eric Bonner wrote:
> I have compiled ssh with support for tcp wrappers, and am logging
> refused
> connections, but cannot seem to figure out how to have the successful
> connections to ssh logged. I am logging successful connections to the
> inetd
> daemons.
>
> Eric
------------------------------------------------------------------------
E-Mail: Carl J. Nobile <[EMAIL PROTECTED]>
Date: 03-Nov-00 Phone: 315-453-2912 Ex. 5336
Time: 07:52:29 Fax: 315-479-0859
Software Engineering Group -- AppliedTheory Corp.
224 Harrison Street, 6th Floor, Syracuse, NY 13202
------------------------------------------------------------------------