From owner-freebsd-questions@FreeBSD.ORG  Tue Nov  2 18:05:46 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 1D97B106564A
	for <freebsd-questions@freebsd.org>;
	Tue,  2 Nov 2010 18:05:46 +0000 (UTC)
	(envelope-from rfarmer@predatorlabs.net)
Received: from mail-pw0-f54.google.com (mail-pw0-f54.google.com
	[209.85.160.54])
	by mx1.freebsd.org (Postfix) with ESMTP id EFF128FC24
	for <freebsd-questions@freebsd.org>;
	Tue,  2 Nov 2010 18:05:45 +0000 (UTC)
Received: by pwi8 with SMTP id 8so1712584pwi.13
	for <freebsd-questions@freebsd.org>;
	Tue, 02 Nov 2010 11:05:45 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.142.43.5 with SMTP id q5mr6418486wfq.401.1288721144983; Tue,
	02 Nov 2010 11:05:44 -0700 (PDT)
Received: by 10.220.187.71 with HTTP; Tue, 2 Nov 2010 11:05:44 -0700 (PDT)
X-Originating-IP: [128.95.133.181]
In-Reply-To: <alpine.BSF.2.00.1011021038080.19472@yeaguy.com>
References: <alpine.BSF.2.00.1011020930390.17971@yeaguy.com>
	<AANLkTikq+gYWD=SEY4nKboV7QUTk9DQdj2bkJ_CRpoAv@mail.gmail.com>
	<alpine.BSF.2.00.1011021001001.18489@yeaguy.com>
	<AANLkTi=e5b0OTqbxky_bgYnH3gNeRyKBeYu1McypRmGV@mail.gmail.com>
	<alpine.BSF.2.00.1011021038080.19472@yeaguy.com>
Date: Tue, 2 Nov 2010 11:05:44 -0700
Message-ID: <AANLkTi=29TVb+Fm6o8Weom_9r6g9_J5vohqOJ=Ngn28f@mail.gmail.com>
From: Rob Farmer <rfarmer@predatorlabs.net>
To: "Justin V." <vic@yeaguy.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: freebsd-questions@freebsd.org
Subject: Re: SSHgaurd and PF
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Nov 2010 18:05:46 -0000

On Tue, Nov 2, 2010 at 10:40, Justin V. <vic@yeaguy.com> wrote:
> Actually this was installed after the port completed:
>
>
> yeaguy# grep sshg /etc/syslog.conf
> auth.info;authpriv.info =A0 =A0 |exec /usr/local/sbin/sshguard
>
> But it is not exactly what the HOWTO ways, the HOWTO does not mention the
> "exec" part.

Could be that the docs are written for Linux or another version of
syslog. The port and the man page say include the exec, so I would go
with that.

>
> Put this line high into this file:
>
> auth.info;authpriv.info =A0 =A0|/usr/local/sbin/sshguard

Ok - if that isn't working, then check to see if your ftp server is
logging to syslog under auth or authpriv. If not you'll need to change
the setup to get the logs from the right place.

--=20
Rob Farmer