Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 17 Feb 1998 13:06:43 -0500
From:      Matthew Hunt <mph@pobox.com>
To:        Steven Ames <steve@news.cioe.com>, freebsd-questions@FreeBSD.ORG
Subject:   Re: login.access logs?
Message-ID:  <19980217130643.14193@mph124.rh.psu.edu>
In-Reply-To: <199802171402.JAA00315@news.cioe.com>; from Steven Ames on Tue, Feb 17, 1998 at 09:02:06AM -0500
References:  <199802171402.JAA00315@news.cioe.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Feb 17, 1998 at 09:02:06AM -0500, Steven Ames wrote:

> If someone telnets into a FreeBSD machine from an address that
> is disallowed by the /etc/login.access file... is that attempt
> logged anywhere? I can't seem to find it. I thought it might make
> a wtmp entry, but its not there.

They show up in /var/log/messages on my machine:

Feb 17 13:05:02 mph124 login: LOGIN mphbot REFUSED (ACCESS) FROM mstar.astro.psu.edu ON TTY ttyp7

The relevant line in my /etc/syslog.conf reads:

*.notice;auth.info;kern.debug;mail.crit;news.err        /var/log/messages

(It's probably the "auth" facility.)

-- 
Matthew Hunt <mph@pobox.com> * Think locally, act globally.
http://mph124.rh.psu.edu/~mph/pgp.key for PGP public key 0x67203349.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980217130643.14193>