From owner-freebsd-questions@freebsd.org Mon Jul 17 05:16:52 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9CFA3CFC1D9 for ; Mon, 17 Jul 2017 05:16:52 +0000 (UTC) (envelope-from guru@unixarea.de) Received: from ms-10.1blu.de (ms-10.1blu.de [178.254.4.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5FED0726B7 for ; Mon, 17 Jul 2017 05:16:51 +0000 (UTC) (envelope-from guru@unixarea.de) Received: from [2.247.250.240] (helo=localhost.unixarea.de) by ms-10.1blu.de with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.86_2) (envelope-from ) id 1dWyOh-0004My-8I; Mon, 17 Jul 2017 07:16:43 +0200 Received: from localhost.my.domain (localhost [127.0.0.1]) by localhost.unixarea.de (8.15.2/8.14.9) with ESMTPS id v6H5GeSV002463 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Mon, 17 Jul 2017 07:16:40 +0200 (CEST) (envelope-from guru@unixarea.de) Received: (from guru@localhost) by localhost.my.domain (8.15.2/8.14.9/Submit) id v6H5GcbT002462; Mon, 17 Jul 2017 07:16:38 +0200 (CEST) (envelope-from guru@unixarea.de) X-Authentication-Warning: localhost.my.domain: guru set sender to guru@unixarea.de using -f Date: Mon, 17 Jul 2017 07:16:38 +0200 From: Matthias Apitz To: Paul Schmehl Cc: FreeBSD Questions Subject: Re: sshd logging Message-ID: <20170717051638.GB2368@c720-r314251> Reply-To: Matthias Apitz Mail-Followup-To: Matthias Apitz , Paul Schmehl , FreeBSD Questions References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="zYM0uCDKw75PZbzx" Content-Disposition: inline In-Reply-To: X-Operating-System: FreeBSD 12.0-CURRENT r314251 (amd64) X-message-flag: Mails containing HTML will not be read! Please send only plain text. User-Agent: Mutt/1.8.0 (2017-02-23) X-Con-Id: 51246 X-Con-U: 0-guru X-Originating-IP: 2.247.250.240 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jul 2017 05:16:52 -0000 --zYM0uCDKw75PZbzx Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable El d=C3=ADa domingo, julio 16, 2017 a las 10:34:42p. m. -0500, Paul Schmehl= escribi=C3=B3: > Is there a way to get sshd to only log successful logins? What about using ipf(8)? > The Russians and=20 > Chinese are filling up the logs, which turns them over every two hours. Hmm. Do you mean that the SSH login from NSA and CIA are logged only once because the are always successful? matthias --=20 Matthias Apitz, =E2=9C=89 guru@unixarea.de, =E2=8C=82 http://www.unixarea.d= e/ =E2=98=8E +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub 8. Mai 1945: Wer nicht feiert hat den Krieg verloren. 8 de mayo de 1945: Quien no festeja perdi=C3=B3 la Guerra. May 8, 1945: Who does not celebrate lost the War. --zYM0uCDKw75PZbzx Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEXmn7rBYYViyzy/vBR8z35Hb+nREFAllsSC4ACgkQR8z35Hb+ nRHRfhAAqcvbDqzL3HcuaxAd0cZtsYBLQFYGpyM8Yg3N9rAn99FvqBIO+EIG/FcM LZhTK5fmyzNQnv+T4gzbNFKA53ulV775qXCucEDP0P+U2u+w7KpsWk8NwxRpncmJ 274oaOplDnih4cBNfJdvC/oNmSLNwjSaqBN6kIX8/jBT9swe8vu77zzbtXx7GPn2 HLa3LBzgb0Zlt50rlDTlxuTGnUteCISWGqgBNBDEaedi1xpaDSizuW/mP+czg0VH yUsRS+M9OcVvsi/NBJTDgOiM0goerOOyHLx0PeoEpqHp6ASENdfiXaNqDhRCw2/M 369W7Efso8Urz5UnajGGeB4JSZrCqoJsjeBwo2sGhlWOK60ABj095yBw3T0gnMg6 6npyl/o3Qk9zzqv1NbYdwe8UbzmY1sERFLMLtFOQ5xlcKHRSRZCCyv83rhIR2hEG FiKDRgso6iEfe7HxxL6qMsgBKOOAfO0YpxfGkUuIckv//2KjGXf5qAYcirwP+x5A LmHvoCjK6+MoxPp54QjFuLOr5tJUBV8Vs/INDqKdODhkeoZvd01+uFFpiD14zKOA 41z/ErWcPV6q7xRWcDIFJd9P/wmwq7aPzah/M0+8k69rQ61n47VwJJUkGC/tuwEN jGFa0lQcg31T7aOWE0AcnvO+Tc86qkii2/BWX7gNgbmkvYbBvzA= =RAGQ -----END PGP SIGNATURE----- --zYM0uCDKw75PZbzx--