LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices



Reply
 
Search this Thread
Old 01-05-2008, 10:49 PM   #1
vonedaddy
Member
 
Registered: Aug 2004
Location: Philadelphia,PA
Posts: 179

Rep: Reputation: 17
vsftpd not writing to logs


I am trying to configure fail2ban to ban people from ftp (running vsftpd).

I can not get it to work and in my troubleshooting I noticed that nothing is being written to my /var/log/vsftpd.log file.

I have this in my vsftpd.conf file:

xferlog_file=/var/log/xferlog
vsftpd_log_file=/var/log/vsftpd.log


man pages say this is how to set the logfile, anyone have any ideas why this would not be working?
 
Old 01-06-2008, 12:25 AM   #2
wit_273
Member
 
Registered: Mar 2007
Location: Nebraska
Distribution: CentOS
Posts: 82

Rep: Reputation: 15
Log in attempts are logged in /var/log/secure. So you need to set your log path for fail2ban to /var/log/secure. The xferlog records what files transfer. I am not sure what vstfpd.log records--but I believe it is optional as a way to break down what xferlog records. Not sure how to redirect what log file is used for log in attempts--not sure that you would want to combine them with the other logs either. If anything you would want to setup a separate log file to record ftp login attempts.
 
Old 01-06-2008, 01:30 AM   #3
vonedaddy
Member
 
Registered: Aug 2004
Location: Philadelphia,PA
Posts: 179

Original Poster
Rep: Reputation: 17
Quote:
Originally Posted by wit_273 View Post
Log in attempts are logged in /var/log/secure. So you need to set your log path for fail2ban to /var/log/secure. The xferlog records what files transfer. I am not sure what vstfpd.log records--but I believe it is optional as a way to break down what xferlog records. Not sure how to redirect what log file is used for log in attempts--not sure that you would want to combine them with the other logs either. If anything you would want to setup a separate log file to record ftp login attempts.

Hmm.. Seems like vsftpd was logging to /var/log/vsftpd.log

Here is the currect contents of the file:

Wed Jan 2 17:17:42 2008 [pid 25713] CONNECT: Client "x.x.x.x"
Wed Jan 2 17:17:42 2008 [pid 25712] [joe] FAIL LOGIN: Client "x.x.x.x"
Wed Jan 2 17:23:00 2008 [pid 25742] CONNECT: Client "x.x.x.x"
Wed Jan 2 17:23:00 2008 [pid 25741] [joe] FAIL LOGIN: Client "x.x.x.x"
Wed Jan 2 17:23:17 2008 [pid 25745] CONNECT: Client "x.x.x.x"
Wed Jan 2 17:23:17 2008 [pid 25744] [joe] FAIL LOGIN: Client "x.x.x.x"
Wed Jan 2 17:23:30 2008 [pid 25747] CONNECT: Client "x.x.x.x"
Wed Jan 2 17:23:30 2008 [pid 25746] [joe] FAIL LOGIN: Client "x.x.x.x"


I dont know why it would have stopped?!!??!

This looks like the syntax fail2ban would need, correct?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
sendmail not writing logs ZAMO Linux - Server 4 04-03-2007 01:57 AM
stop writing logs on harddisk lajner Linux - General 4 08-24-2006 03:57 PM
anonymous folder writing with vsftpd thomas.jt Linux - Networking 3 10-31-2005 09:18 PM
vsftpd logs? dsgdevil Linux - Software 2 05-25-2004 06:39 PM
apache is writing empty logs ocularbob Linux - Software 1 07-03-2003 03:26 AM


All times are GMT -5. The time now is 11:35 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration