Hi, i was suggested to post this here rather than the bug tracker[1]:

Running on Ubuntu 9.04 and the denyhosts 2.6-5 package. When I first
install it, I notice that hosts, hosts-root and hosts-restricted *all* have
the same IP addresses in them with 0 login attempts. In hosts-root for
example for IPs I know tried to login as root, the "number of times" field
is set to 0:

**auth.log**:
Aug 6 09:46:38 ianu sshd[15383]: User root from 59.103.0.133 not allowed
because not listed in AllowUsers
Aug 6 09:46:38 ianu sshd[15383]: pam_unix(sshd:auth): authentication
failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.103.0.133
user=root

**hosts-root**:
59.103.0.133:0:Thu Aug 6 14:21:23 2009

Now Denyhosts is adding the right IPs to hosts.deny, and if I look in
users-invalid:

root:16:Fri Aug 7 00:39:31 2009

It is logging failed root attempts there, just failing to handle
hosts-root properly. I would also prefer if *only* hosts that had
tried to login as root or restricted were in the respective working
files rather than all IPs.

Thanks for any info on this.
----
[1] 
http://sourceforge.net/tracker/index.php?func=detail&aid=2833172&group_id=131204&atid=720419

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Denyhosts-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/denyhosts-user

Reply via email to