Luke wrote: > Is there any way to block both ssh and apple remote desktop (VNC) > requests at the same time. I currently have it setup for ssh only, > but it seems that more and more authentication attempts happen on > this port. I tried searching the lists but didn't come up with > something definitive. > > Aug 14 10:53:51 Crapbag > /System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer[550]: > Authentication: FAILED :: User Name: N/A :: Viewer Address: > 186.87.135.11 :: Type: VNC DES Aug 14 10:54:26 Crapbag > /System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/MacOS/AppleVNCServer[550]: > Authentication: FAILED :: User Name: N/A :: Viewer Address: > 186.87.135.11 :: Type: VNC DES
Yes. There was a recent (this month) thread about this, but I don't know if it finally worked. It boils down to adding these 2 lines to your configuration: SSHD_FORMAT_REGEX=.*(sshd.*:|\[sshd\]|AppleVNCServer\[\d+\]:) (?P<message>.*) USERDEF_FAILED_ENTRY_REGEX=Authentication: FAILED :: User Name: (?P<user>\S+) :: Viewer Address: (?P<host>\S+) .* Its really 2 lines, the mail message is wrapping things, and there is a space in there, at the end of what looks like the first line. -- René Berber ------------------------------------------------------------------------------ This SF.net email is sponsored by Make an app they can't live without Enter the BlackBerry Developer Challenge http://p.sf.net/sfu/RIM-dev2dev _______________________________________________ Denyhosts-user mailing list Denyhosts-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/denyhosts-user
