deny hosts removing an Ip and checking tcpwrappers
On this link
http://www.cyberciti.biz/faq/block-s...ith-denyhosts/ if you search following Quote:
I get following error Quote:
Also how do I make sure if I installed denyhosts then it is working. I installed but can not see the daemon running. Quote:
Also when I check tcp wrappers configuration Quote:
|
Hi tkmsr,
Quote:
Code:
grep 'from' /var/log/auth.log|cut -d ' ' –-field 13 | uniq -c | sort -nr > ct-result.txt Code:
# /etc/init.d/denyhosts start |
[QUOTE=sem007;4135620]Hi tkmsr,
Try following command Code:
grep 'from' /var/log/auth.log|cut -d ' ' –-field 13 | uniq -c | sort -nr > ct-result.txt Quote:
has this entry and if I do a grep on this Quote:
But still how do I check tcp wrappers |
Quote:
Code:
$ sudo apt-get install xinetd Code:
tcpdchk -v /etc/hosts.allow # for allow allow /etc/hosts.deny # for deny host Follow that link once again and let us know if have any question. Regards, |
Quote:
Quote:
Code:
tcpdchk -v |
Create inetd.conf file manually and then run command
Code:
# touch /etc/inetd.conf |
Ok I did and then
Quote:
|
Read man page it explain it.
Quote:
|
Ok things are working now I installed denyhosts on 21 Oct on Ubuntu 10.04 server and I can see a pid /var/run/denyhosts.pid running also I see some entries in log files and default values of /etc/denyhosts.conf
at some places I see refused connect while for other places I see infinite number of attempts to login to my server. Here is a log file if you want to see http://pastebin.com/RhDPCbPK and here is /etc/denyhosts.conf http://pastebin.com/rFvU4Kiv When denyhosts is running then I hope that invalid attempts to login to server should be refused connect after threshold which is 4 in this case. Let me know if you have any suggestions. |
All times are GMT -5. The time now is 07:12 AM. |