From owner-freebsd-ports-bugs@FreeBSD.ORG Thu Sep 4 23:20:03 2008 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7B6851065674 for ; Thu, 4 Sep 2008 23:20:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 509B08FC34 for ; Thu, 4 Sep 2008 23:20:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m84NK2Aq066161 for ; Thu, 4 Sep 2008 23:20:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m84NK2RR066160; Thu, 4 Sep 2008 23:20:02 GMT (envelope-from gnats) Date: Thu, 4 Sep 2008 23:20:02 GMT Message-Id: <200809042320.m84NK2RR066160@freefall.freebsd.org> To: freebsd-ports-bugs@FreeBSD.org From: Mij Cc: Subject: Re: ports/126867: security/sshguard-pf 1.1 fails to detect attempted logins X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Mij List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Sep 2008 23:20:03 -0000 The following reply was made to PR ports/126867; it has been noted by GNATS. From: Mij To: bug-followup@FreeBSD.org, freebsdports@bindone.de Cc: Subject: Re: ports/126867: security/sshguard-pf 1.1 fails to detect attempted logins Date: Fri, 5 Sep 2008 01:03:05 +0200 The PAM log entry you report follows a failed login attempt, but in turn should be followed by SSHD's own log entry, that looks like Sep 4 20:25:46 voodoo sshd[19972]: Failed keyboard-interactive/pam for invalid user usrn from 1.2.3.4 port 51196 ssh2 this latter is what sshguard is sensitive to. If you examine the context around that line in your auth.log, what does it look like?