Date: Tue, 19 Aug 2008 14:12:02 +0200 From: "Michael Grant" <mgrant@grant.org> To: "FreeBSD Questions" <freebsd-questions@freebsd.org> Subject: Re: getting pam to put the ip address in the log Message-ID: <62b856460808190512v1782113eic15a61488280d41b@mail.gmail.com> In-Reply-To: <62b856460808190502x3a75c3c5p87cd4f9e5a7ddb26@mail.gmail.com> References: <62b856460808190502x3a75c3c5p87cd4f9e5a7ddb26@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Aug 19, 2008 at 2:02 PM, Michael Grant <mgrant@grant.org> wrote: > Recently I have been seeing lots of connections to my sshd trying to guess > passwords. One thing I noticed was the hostname reported in the auth.log > without reverse dns. sshd never puts in the ip address, this is all I see: > > sshd[14450]: error: PAM: authentication error for illegal user access from > host1.xxx.br > > Is it possible to get pam or sshd or whatever is ultimatly logging this to > put the ip address in the log so I can see where this is really coming from? > > Michael Grant > Ths seems to work: Put this in /etc/ssh/sshd_config: UseDNS no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?62b856460808190512v1782113eic15a61488280d41b>