Date: Mon, 18 Sep 2023 10:06:02 +0000 (UTC) From: "Dan Mahoney (Gushi)" <freebsd@gushi.org> To: questions@freebsd.org Subject: Quieting SSHd messages to the console Message-ID: <ae1fe405-7cd0-66e4-8224-309d933d1c79@gushi.org>
next in thread | raw e-mail | index | archive | help
All, Sometimes, like when doing an upgrade on my system, I want to use the console. I want to get a message on the console when a user su's (auth.notice). That seems pretty critical. I do not want to get logs on the console for every other ssh session that fails to complete because the internet is full of bots. Sep 18 08:42:31 <auth.err> prime sshd[3098]: error: Fssh_kex_exchange_identification: Connection closed by remote host Sep 18 08:38:24 <auth.err> prime sshd[2531]: error: PAM: Authentication error for illegal user test from 78.38.71.249 What goes to the console in /etc/syslog.conf is: *.err;kern.warning;auth.notice;mail.crit /dev/console Is there a way to say "everything else.err, but not auth.err"? -Dan -- --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC FB: fb.com/DanielMahoneyIV LI: linkedin.com/in/gushi Site: http://www.gushi.org ---------------------------
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ae1fe405-7cd0-66e4-8224-309d933d1c79>