Re: [Denyhosts-user] adding vsftp service to denyhosts

2010-11-30 Thread Danilo Godec
On 11/29/2010 07:23 PM, Tim Evans wrote: > Steve Blandford wrote: > >>I've implemented the solution you suggested and have things sort of >> working > Following up on this. Was this finally resolved? If so, what was the > solution? Thanks. > The solution is to use VSFTP with TCP Wrappe

Re: [Denyhosts-user] adding vsftp service to denyhosts

2010-11-29 Thread Tim Evans
Steve Blandford wrote: > >I've implemented the solution you suggested and have things sort of > working Following up on this. Was this finally resolved? If so, what was the solution? Thanks. -- Tim Evans, TKEvans.com, Inc.| 5 Chestnut Court UNIX System Admin Consulting|

Re: [Denyhosts-user] adding vsftp service to denyhosts

2010-11-19 Thread Danilo Godec
I use a plugin to create firewall rules to block offending IP's. This way I can block services that don't use tcp wrappers (ie. hosts.deny / hosts.allow). It also allows me to run a single DenyHosts and protect several servers. Danilo On 11/13/2010 09:02 PM, Steve Blandford wrote: > Oops yo

Re: [Denyhosts-user] adding vsftp service to denyhosts

2010-11-13 Thread Steve Blandford
Oops you are right hosts.deny Sent from my iPad On Nov 12, 2010, at 3:37 PM, René Berber wrote: > On 11/12/2010 5:33 PM, René Berber wrote: >> On 11/12/2010 5:22 PM, Steve Blandford wrote: >> >>> What am I missing? Does VSFTPD not look at the deny.hosts file? > > And you meant hosts.deny, rig

Re: [Denyhosts-user] adding vsftp service to denyhosts

2010-11-12 Thread René Berber
On 11/12/2010 5:33 PM, René Berber wrote: > On 11/12/2010 5:22 PM, Steve Blandford wrote: > >> What am I missing? Does VSFTPD not look at the deny.hosts file? And you meant hosts.deny, right? -- René Berber -- Centrali

Re: [Denyhosts-user] adding vsftp service to denyhosts

2010-11-12 Thread René Berber
On 11/12/2010 5:22 PM, Steve Blandford wrote: > What am I missing? Does VSFTPD not look at the deny.hosts file? That's exactly the point, was vsftpd built with tcp_wrappers support? or not. There is another way, instead of using vsftpd as a stand alone service, you could use it as a xinetd (or i

Re: [Denyhosts-user] adding vsftp service to denyhosts

2010-11-12 Thread Steve Blandford
Thank you René, I've implemented the solution you suggested and have things sort of working I set BLOCK_SERVICE = ALL and changed my USERDEF_FAILED_ENTRY_REGEX to; SSHD_FORMAT_REGEX=.* (sshd.*:|\[sshd\]|vsftpd.*:) (?P.*) USERDEF_FAILED_ENTRY_REGEX=authentication failure.* ruser= rhost=(?

Re: [Denyhosts-user] adding vsftp service to denyhosts

2010-11-11 Thread René Berber
On 11/11/2010 3:04 PM, Steve Blandford wrote: > this is my first post to the list. I'm looking to add VSFTPD as a service to > monitor…. > > Here is what I've done so far in denyhosts.cfg…. > > The issue is that the regex I'm using is not working for the vsftpd. I > adapted the regex from an o