From owner-freebsd-questions@FreeBSD.ORG  Mon Sep 16 14:37:40 2013
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTP id 54C1267E
 for <freebsd-questions@freebsd.org>; Mon, 16 Sep 2013 14:37:40 +0000 (UTC)
 (envelope-from vrwmiller@gmail.com)
Received: from mail-ie0-x22f.google.com (mail-ie0-x22f.google.com
 [IPv6:2607:f8b0:4001:c03::22f])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id 256982240
 for <freebsd-questions@freebsd.org>; Mon, 16 Sep 2013 14:37:40 +0000 (UTC)
Received: by mail-ie0-f175.google.com with SMTP id e14so7391658iej.20
 for <freebsd-questions@freebsd.org>; Mon, 16 Sep 2013 07:37:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:sender:in-reply-to:references:date:message-id:subject
 :from:to:cc:content-type;
 bh=HaGsJ/JULXWTQcIJeMiUyHKLnAF7dqKtRunRQxWQooM=;
 b=tSxFXDLpeN3ozDoReuBlTye5FtTvl9q/ejyBX34VAxujIAoBceVaLQo1JH422yfW5X
 3NsKQ9U8I+nqMgUoD3Z3tQL9MXbiaRPhRb4+z60dyJG4kS1OjImODOZb6+wS2m/Ghrpx
 AGZwpgBLSqTrJBv9HtkApqPlNolJPIjwcHPvOGLZVTFzgE8oVmnGx6XFEEZdAOmlvMhS
 HAwh7mv449e6fQAeGNgcS7XGtHFmJ5iDVlyBDOsOH62KimoBKCAePhmcrJPbZ4JFfNPI
 TfqQRVkhj6QCl/kMTqJdV0wRD82eFJfOk0OhrHtSIKqrOWi+VrW1dYyYUUHsyvaViHs0
 oFbA==
MIME-Version: 1.0
X-Received: by 10.50.43.170 with SMTP id x10mr6415428igl.45.1379342259594;
 Mon, 16 Sep 2013 07:37:39 -0700 (PDT)
Sender: vrwmiller@gmail.com
Received: by 10.64.9.39 with HTTP; Mon, 16 Sep 2013 07:37:39 -0700 (PDT)
In-Reply-To: <CAPzqM6D=hy9P-N3TwLZQAbPp4bU_Sp57-LN-DmLaBkD_3jQSTg@mail.gmail.com>
References: <CAPzqM6D=hy9P-N3TwLZQAbPp4bU_Sp57-LN-DmLaBkD_3jQSTg@mail.gmail.com>
Date: Mon, 16 Sep 2013 10:37:39 -0400
X-Google-Sender-Auth: xV8qsomu5nN6hqXPii_tkLR3gY4
Message-ID: <CAHzLAVH+DU67cYt9vQB9BSRor8HgsL=A_HxFGbXpPaG-0ukEFQ@mail.gmail.com>
Subject: Re: how to log sshd access in a single file
From: Rick Miller <vmiller@hostileadmin.com>
To: aurikus grande <aurikus@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
X-Content-Filtered-By: Mailman/MimeDel 2.1.14
Cc: FreeBSD Questions <freebsd-questions@freebsd.org>
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Sep 2013 14:37:40 -0000

On Mon, Sep 16, 2013 at 9:36 AM, aurikus grande <aurikus@gmail.com> wrote:

> Hello,
>
> just a few days ago i setup my first FreeBSD server, so i am new to this
> OS.
>
> I already tried to find the information i was looking for, but to no luck.
>
> I try to add a line in /etc/hosts.allow which would allow and log all
> attempts using SSH (sshd).


[ snip ]

I would recommend using the auth and authpriv facilities for syslog.  Check
the syslog.conf manpage for configuring such activity.  I believe FreeBSD
defaults to failed ssh authentication is logged to /var/log/messages while
successful authentication is written to /var/log/auth.log.

-- 
Take care
Rick Miller