Date: Mon, 25 Aug 2008 00:47:24 +0200 From: Polytropon <freebsd@edvax.de> To: Len Conrad <LConrad@Go2France.com> Cc: freebsd-questions@freebsd.org Subject: Re: ftpd and sshd logging of domain names Message-ID: <20080825004724.ca193745.freebsd@edvax.de> In-Reply-To: <200808250011937.SM01744@TX2.Go2France.com> References: <200808242325843.SM01744@TX2.Go2France.com> <20080824234412.c4356260.freebsd@edvax.de> <200808250011937.SM01744@TX2.Go2France.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 24 Aug 2008 17:18:55 -0500, Len Conrad <LConrad@Go2France.com> wrote: > with -ll, ftpd still logs failures as auth.log as > same in ftpd.log > [The IPs] they are not logged. I did the three steps I mentioned and have failures with IPs logged in /var/log/ftpd.log, for example: connection from 79.165.190.70 (79.165.190.70) FTP LOGIN FAILED FROM 79.165.190.70 FTP LOGIN FAILED FROM 79.165.190.70, Administrateur repeated login failures from 79.165.190.70 connection from projectvibe.net (205.234.98.200) FTP LOGIN FAILED FROM projectvibe.net FTP LOGIN FAILED FROM projectvibe.net, Administrator But you're right, in the second example, the host name is logged, not the IP, but the IP is always logged in the "connection from" lines. Did you have any luck parsing the mailing list's archive? -- Polytropon >From Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ...
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080825004724.ca193745.freebsd>