From owner-freebsd-questions@freebsd.org Wed Sep 30 12:04:56 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2C003A0C331 for ; Wed, 30 Sep 2015 12:04:56 +0000 (UTC) (envelope-from FreeBSD@shaneware.biz) Received: from ipmail06.adl2.internode.on.net (ipmail06.adl2.internode.on.net [150.101.137.129]) by mx1.freebsd.org (Postfix) with ESMTP id BEA371C88 for ; Wed, 30 Sep 2015 12:04:55 +0000 (UTC) (envelope-from FreeBSD@shaneware.biz) Received: from ppp118-210-169-30.lns20.adl6.internode.on.net (HELO leader.local) ([118.210.169.30]) by ipmail06.adl2.internode.on.net with ESMTP; 30 Sep 2015 21:29:45 +0930 Subject: Re: SSHguard & IPFW To: "Michael B. Eichorn" , Alexandre , FreeBSD Questions Mailing List References: <1443531575.1236.13.camel@michaeleichorn.com> From: Shane Ambler Message-ID: <560BCEAF.20900@ShaneWare.Biz> Date: Wed, 30 Sep 2015 21:29:43 +0930 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: <1443531575.1236.13.camel@michaeleichorn.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Sep 2015 12:04:56 -0000 On 29/09/2015 22:29, Michael B. Eichorn wrote: > At a guess something happened to kick off sshguard without the rc script, > but for most setups the rc script is the proper way to start sshguard. > > Is there any chance that you might have followed an old guide? In > sshguard < 1.5 a valid configuration option was to use syslog to kickoff > sshguard and not use sshguard enable, but this is now depreciated in > favor of the new 'Log Sucker' introduced in v1.5. No need for an old guide - using syslog instructions are given by the port. cat /usr/ports/security/sshguard/files/pkg-message.in ########################################################################## Sshguard installed successfully. %%PKGMSG_FWBLOCK%% If you would like to use sshguard via syslogd, add an entry to your /etc/syslog.conf like the following: auth.info;authpriv.info |exec %%PREFIX%%/sbin/sshguard and use "/etc/rc.d/syslogd reload" to activate it. Note, you can add additional arguments to the sshguard command if you so desire. Alternatively, you can also start sshguard as a daemon by using the rc.d script installed at %%PREFIX%%/etc/rc.d/sshguard . See sshguard(8) and http://sshguard.sourceforge.net for additional info. ########################################################################## -- FreeBSD - the place to B...Software Developing Shane Ambler