From owner-freebsd-questions@FreeBSD.ORG Fri Jun 6 06:56:52 2008 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3DF33106566C for ; Fri, 6 Jun 2008 06:56:52 +0000 (UTC) (envelope-from bri@brianwhalen.net) Received: from entwistle.sonicboom.org (entwistle.sonicboom.org [66.93.34.170]) by mx1.freebsd.org (Postfix) with ESMTP id 01D348FC0C for ; Fri, 6 Jun 2008 06:56:51 +0000 (UTC) (envelope-from bri@brianwhalen.net) Received: from [127.0.0.1] (localhost.sonicboom.org [127.0.0.1]) by entwistle.sonicboom.org (8.14.2/8.14.2) with ESMTP id m566OdwZ055110; Thu, 5 Jun 2008 23:24:40 -0700 (PDT) (envelope-from bri@brianwhalen.net) Message-ID: <4848D82E.6040708@brianwhalen.net> Date: Thu, 05 Jun 2008 23:24:46 -0700 From: Brian User-Agent: Thunderbird 2.0.0.14 (Windows/20080421) MIME-Version: 1.0 To: "sahil@tandon.net" References: <48485C59.3060504@netfence.it> <20080606043653.GA55456@shepherd> In-Reply-To: <20080606043653.GA55456@shepherd> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: questions@freebsd.org Subject: Re: Denyhost X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Jun 2008 06:56:52 -0000 Sahil Tandon wrote: > Andrea Venturoli wrote: > > >> Anyone using this? >> I've used it for a long time on a 6.x box and it worked fine. >> Recently I had to deactivate it since it seems to lock away every IP which >> is listed in the logs. >> Any hint? >> > > Give more information. Which logs? Give an example. Show relevant excerpts > from your denyhosts configuration. Which version of denyhosts are you > running? How and where in /etc/hosts.allow is the denyhosts list being > referenced? > > If this is the security/denyhosts port being discussed, and all traffic is being blocked from listed IPs, that is a config possibility. IP addresses that show up in the deny list can either have ssh or all traffic denied from those specific hosts. Brian