From owner-freebsd-security@freebsd.org Tue Nov 10 10:55:36 2015 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A0F5AA2BDE2; Tue, 10 Nov 2015 10:55:36 +0000 (UTC) (envelope-from des@des.no) Received: from smtp.des.no (smtp.des.no [194.63.250.102]) by mx1.freebsd.org (Postfix) with ESMTP id 667901D76; Tue, 10 Nov 2015 10:55:36 +0000 (UTC) (envelope-from des@des.no) Received: from desk.des.no (smtp.des.no [194.63.250.102]) by smtp.des.no (Postfix) with ESMTP id 99D1720FC; Tue, 10 Nov 2015 10:55:35 +0000 (UTC) Received: by desk.des.no (Postfix, from userid 1001) id 54A0C3F8D5; Tue, 10 Nov 2015 11:55:28 +0100 (CET) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: Willem Jan Withagen Cc: freebsd-current@freebsd.org, freebsd-security@freebsd.org Subject: Re: OpenSSH HPN References: <86io5a9ome.fsf@desk.des.no> <5641BFC4.7050208@digiware.nl> Date: Tue, 10 Nov 2015 11:55:28 +0100 In-Reply-To: <5641BFC4.7050208@digiware.nl> (Willem Jan Withagen's message of "Tue, 10 Nov 2015 10:58:28 +0100") Message-ID: <86a8qm9l9b.fsf@desk.des.no> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2015 10:55:36 -0000 Willem Jan Withagen writes: > I know I've installed the ports once to see if, and how I would be > able to add more IP-address infor to some of the warnings and > errors. And then to get thos errors recognised by tools like sshguard > and fail2ban. Do you mean logging IP addresses instead of hostnames? Just turn off UseDNS. It is off by default since 6.8. If you mean adding IP addresses or hostnames to messages that don't already have them, try suggesting it on the openssh-portable mailing list (openssh-unix-dev@mindrot.org). DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no