how to sshd-syslog ip-adresses only

womd · 04-18-2008, 06:17 AM

hi forums

this time i have some troubles with my log.

in my /var/log/messages :

Mar 22 21:56:01 smallsau sshd[17647]: Invalid user lee from ::ffff:60.2.247.235
Mar 22 21:56:02 smallsau sshd[17627]: error: PAM: Authentication failure for root from forum.skynet.br

how to configure syslog/sshd to log the ip-adress on a PAM Auth error ?

im using suse 7.3

acid_kewpie · 04-18-2008, 06:25 AM

man sshd_config says:

Code:

     UseDNS  Specifies whether sshd should look up the remote host name and
	     check that the resolved host name for the remote IP address maps
	     back to the very same IP address.	The default is ``yes''.

womd · 04-18-2008, 06:36 AM

ok thank you !

must have overread it ... sry for disturbing