Am 08.03.2013 15:50, schrieb Reindl Harald:
Am 08.03.2013 15:01, schrieb Tilman Schmidt:
Am 07.03.2013 19:49, schrieb Les Mikesell:
[...]
Does it work if you set UseDNS no in /etc/ssh/sshd_config?
Not really. That seems to remove the "reverse mapping checking failed" messages (assuming there were the usual number of such attempts after I set that option), but IP addresses for failed logins to existing users are never logged. The log contains just:
sshd[27912]: Disconnecting: Too many authentication failures for root
not true,
How do you know? I saw no logon from you on the machine I tested this on. :-)
i have "UseDNS no" on ANY machine since a long time and /var/log/secure contains ip-addresses as also logwatch
For failed login attempts to existing usernames? Can you share a log entry? That would give me hope that it's just a configuration issue.
Thanks, Tilman