oops--sent this to René privately by accident...

René Berber wrote:
> Glenn Sieb wrote:
>
>   
>> The logs are blank.
>>
>> sshd is not blocking anything on the list.  :(
>>
>> -rw-r-----  1 root  wheel  63 May 12 00:00 /var/log/denyhosts
>>     
>
> Log rotation at 00:00? is DH alive?  any post-rotation commands?
>   
# ps awwux | grep deny
root           834  0.9  0.5 53660 21492  ??  S    19Apr08  30:40.56
/usr/local/bin/python /usr/local/bin/denyhosts.py --config
/usr/local/etc/denyhosts.conf --daemon

Using newsyslog, there's no "N" (which would prevent a signal being sent
to entry for denyhosts.log or security (which has never been used since
2002). Auth.log has sshd entries, but nothing saying anything was
denied. I did, however, add /var/run/denyhosts.pid to the end of it's
entry in newsyslog.conf.
>
> Same as above, log rotation? then look at the old log, security.0 or 
> security.0.gz
>   
I just restarted denyhosts and this is in /var/log/denyhosts:

# tail -f /var/log/denyhosts
2008-05-12 15:12:05,906 - denyhosts   : INFO     DenyHosts daemon is now
running, pid: 80810
2008-05-12 15:12:05,906 - denyhosts   : INFO     send daemon process a
TERM signal to terminate cleanly
2008-05-12 15:12:05,907 - denyhosts   : INFO       eg.  kill -TERM 80810
2008-05-12 15:12:05,907 - denyhosts   : INFO     monitoring log:
/var/log/auth.log
2008-05-12 15:12:05,908 - denyhosts   : INFO     sync_time: 3600
2008-05-12 15:12:05,908 - denyhosts   : INFO     daemon_purge:      3600
2008-05-12 15:12:05,908 - denyhosts   : INFO     daemon_sleep:      30
2008-05-12 15:12:05,908 - denyhosts   : INFO     purge_sleep_ratio: 120
2008-05-12 15:12:05,908 - denyhosts   : INFO     sync_time:      : 3600
2008-05-12 15:12:05,908 - denyhosts   : INFO     sync_sleep_ratio: 120

I'm letting the tail run for a while, I'll see if anything comes up there.

Thanks, René!
Best,
--Glenn

-- 
...destination is merely a byproduct of the journey
           --Eric Hansen



-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft 
Defy all challenges. Microsoft(R) Visual Studio 2008. 
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Denyhosts-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/denyhosts-user

Reply via email to