SSH blocking with sshguard

English Network/Internet
#1

Hi,

When sshguard detects that there is a break-in attempt, I get following error message:

Sep 26 19:04:14 sshd[12297]: reverse mapping checking getaddrinfo for server [xxx.xxx.xxx.xxx] failed - POSSIBLE BREAK-IN ATTEMPT!
Sep 26 19:04:15 sshguard[13884]: Blocking 188.132.220.218:4 for >630secs: 10 danger in 1 attacks over 0 seconds (all: 10d in 1 abuses over 0s).
Sep 26 19:04:15 sshguard[13884]: Blocking command failed. Exited: -1

server:/etc # ps auxw |grep sshguard
root 13884 0.0 0.2 10584 1216 ? Sl Sep22 0:51 /usr/sbin/sshguard -l /var/log/messages -a 4 -p 420 -s 1200
root 27147 0.0 0.1 2504 508 pts/0 S+ 22:15 0:00 grep sshguard

I am using OpenSuSE 11.4 32bits version.
Someone has an idea what could be wrong?

#2

Welcome here new poster.

While I hope that someone with more knowledge about sshguard will try to answer you asap, I have a minor, but important remark. Will you please next time when you post computer text, be so kind to do this between CODE tags? As this is a rather hidden feature of this forum, please see: Posting in Code Tags - A Guide

#3

Sorry, I will keep this in mind!:shame:

#4

No need to say sorry. As I said the feature is not obvious to find in the forums software, but it is very important in our sort of environment.