hosts.allow

[teqmem]

Hello,

If you implement tcp wrapping and put restrictions in the hosts.allow on who can connect, how can you tell who tried to connect but were rejected based on the entries in the hosts.allow?

I enabled logging on sshd and tcp wrapping but rejected attempts are not logged.

Thank you.

 

[mrn]

Have you tried

who -a /etc/security/failedlogin

Mike

"A foolproof method for sculpting an elephant: first, get a huge block of marble, then you chip away everything that doesn't look like an elephant."

http://www.airport-parking-site.co.uk/

 

[trisco]

By default, TCP Wrapper uses the mail facility within syslog to log to /var/adm/syslog. Check /etc/syslog.conf to see where mail.debug is logging to. There you will also find log entries from TCP Wrapper.