Koozali.org: home of the SME Server

Denyhosts contrib for SSH

Offline dadou

  • **
  • 47
  • +0/-0
Denyhosts contrib for SSH
« on: November 22, 2016, 11:45:16 PM »
Hello,

I tried to install Denyhosts on my 8.2 box. I already installed the contrib that was working fine long time ago. But it's not doing the job anymore.
Even if I uninstall the contrib, find and delete all the config files still containing denyhost in the namefile and reinstalling the contrib everything is fine for install, deamon is running and logging correctly, all the params for source file seems fine, but the deamon is not doing his job and don't ban the brute force.

An idea ?

Thanks,

David

guest22

Re: Denyhosts contrib for SSH
« Reply #1 on: November 23, 2016, 06:03:03 AM »
Consider upgrading to the latest Koozali SME Server 9.

a. 8.2 is *almost* EOL
b. 9.1 has build in protection against ssh attacks

Offline Jean-Philippe Pialasse

  • *
  • 2,840
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Denyhosts contrib for SSH
« Reply #2 on: November 23, 2016, 08:25:39 PM »
I second the migration.

the regex have been updated recently in centos 5  /SME8 and we can find the same bug as there was on centos 6 /sme9

we could migrate this patch to SME8 however  as stated it will be end of life in 5 months.

Offline Jean-Philippe Pialasse

  • *
  • 2,840
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Denyhosts contrib for SSH
« Reply #3 on: November 25, 2016, 12:03:05 AM »
I patched smeserver-dehyhosts for SME8, you should be able to see ban again after an update with yum.

Offline dadou

  • **
  • 47
  • +0/-0
Re: Denyhosts contrib for SSH
« Reply #4 on: November 25, 2016, 08:58:00 AM »
Hello Jean-Philippe,

Thanks for your quick answer just updated it it works great.

Have a good day, and thanks again,

David