DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD Packages and Ports

OpenBSD Packages and Ports Installation and upgrading of packages and ports on OpenBSD.

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1   (View Single Post)  
Old 16th January 2017
psypro psypro is offline
Package Pilot
 
Join Date: Mar 2016
Location: Continent:Europe
Posts: 156
Default sshguard

Context
I open up ssh to internett, so I can login from outside my house, to my server at home.
I have added a strong sshkey, and disabled login with password.
I have added a bruteforce part to my pf.conf from : https://home.nuug.no/~peter/pf/en/bruteforce.html

But I still see login attempt from external user in my /var/log/authlog

So I installed sshgurad
Code:
pkg_add sshguard
and added sshgurad table to my pf.conf

Code:
table <sshguard> persist
block in proto tcp from <sshguard>
But how can i verify it is working? is it configured out of the box, or do I need to tell it manually to read /var/log/authlog.

And on a more meta level, does program like sshguard strengthen or weaken the security. Should not a -b 15000 key be strong enough in it self? Another service running, increase risk from errors or backdoors in program. But on a more psychological term, it anoys me to se login attempts from hostile user again and again, and it clutter my /var/log/authlog.
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
sshguard and packet filter sputnik OpenBSD Security 0 18th April 2009 02:11 PM
sshguard+pf sputnik OpenBSD Security 0 17th April 2009 03:43 PM


All times are GMT. The time now is 05:07 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick