At 11:55 AM -0700 8/19/07, Phil Schwartz sent email regarding Re: 
[Denyhosts-user] My Own IP is Added:
>Try:
>
>stop DH
>
>remove your IP from all WORK_DIR files (except allowed_hosts)

By WORK_DIR, I assume you mean: denyhosts/data/

>add your IP to WORK_DIR/allowed_hosts


I don't have that file. I have:
hosts
hosts-restricted
hosts-root
hosts-valid
offset
purge-history
suspicious-logins
sync-received
sync-timestamp
users-hosts
users-invalid
users-valid

Might you mean hosts-valid?

>
>start DH
>
>Regards,
>
>Phil
>
>On Sun, 19 Aug 2007, Marconi wrote:
>
>>OK, I keep getting my own IP banned. Here's my setup and how I got banned:
>>
>>My server is behind a NAT router with a private IP. That NAT router
>>also works for my LAN, including my workstation.
>>
>>'root' login is disabled on the server so no one should be logging in
>>as root. I therefore set:
>>      DENY_THRESHOLD_ROOT = 1
>>
>>In retrospect, this was not a Good Idea.
>>
>>The problem arose when I tried to ssh to my server from my
>>workstation, forgetting that I had su'd to root on my workstation. I
>>was thus trying to ssh to my server as root and was immediately
>>banned by DenyHosts.
>>
>>So... I deleted my (public) IP from hosts.deby. I deleted any
>>references to my IP from asl.log (I'm on OS X). I even deleted
>>references to my IP from the DenyHosts log.
>>
>>Still, my IP is being added back in on a regular basis.
>>
>>2007-08-19 08:53:24,502 - denyhosts   : INFO     new denied hosts:
>>['24.119.59.5']
>>
>>It's as though my IP is cached somewhere. I've quit and restarted
>>DenyHosts. No help.
>>
>>Is that IP being added due to synching?
>>
>>How do I fix this?

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Denyhosts-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/denyhosts-user

Reply via email to