Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Jul 2017 18:35:14 -0500
From:      Paul Schmehl <>
To:        FreeBSD Questions <>
Subject:   Re: sshd logging
Message-ID:  <B7D68041A26D18D97D24F8CA@Pauls-MacBook-Pro.local>
In-Reply-To: <>
References:  <C96D90F644C8AD0486EB3C91@Pauls-MacBook-Pro.local> <20170717051638.GB2368@c720-r314251> <>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
--On July 17, 2017 at 6:38:00 AM -0400 Daniel Feenberg <>=20

> On Mon, 17 Jul 2017, Matthias Apitz wrote:
>> El d=C3=ADa domingo, julio 16, 2017 a las 10:34:42p. m. -0500, Paul =
>> escribi=C3=B3:
>>> Is there a way to get sshd to only log successful logins?
>> What about using ipf(8)?
> denyhosts or fail2ban would be easier. You'd still get a few lines in the
> logs, but only a few.

Thanks, Dan. I'll take a look.

I've never understood why logging routinely records every failed=20
interaction. I suppose it's because summarizing it would take more=20
processing plus some sort of database. Seriously though, why should I care=20
about failed logins? It's the successful ones that I need to know about.

Paul Schmehl, Retired
As if it wasn't already obvious, my opinions
are my own and not those of my employer.
"It is as useless to argue with those who have
renounced the use of reason as to administer
medication to the dead." Thomas Jefferson
"There are some ideas so wrong that only a very
intelligent person could believe in them." George Orwell

Want to link to this message? Use this URL: <>