OK, I keep getting my own IP banned. Here's my setup and how I got banned:
My server is behind a NAT router with a private IP. That NAT router
also works for my LAN, including my workstation.
'root' login is disabled on the server so no one should be logging in
as root. I therefore set:
DENY_THRESHOLD_ROOT = 1
In retrospec,t this was not a Good Idea.
The problem arose when I tried to ssh to my server from my
workstation, forgetting that I had su'd to root on my workstation. I
was thus trying to ssh to my server as root and was immediately
banned by DenyHosts.
So... I deleted my (public) IP from hosts.deby. I deleted any
references to my IP from asl.log (I'm on OS X). I even deleted
references to my IP from the DenyHosts log.
Still, my IP is being added back in on a regular basis.
2007-08-19 08:53:24,502 - denyhosts : INFO new denied hosts:
['24.119.59.5']
It's as though my IP is cached somewhere. I've quit and restarted
DenyHosts. No help.
Is that IP being added due to synching?
How do I fix this?
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Denyhosts-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/denyhosts-user
