-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Saturday, 2008-11-22 at 03:27 -0600, David C. Rankin wrote:
Carlos E. R. wrote:
You know, somehow it is just gratifying to take a peek at the logs now:
Nov 22 03:06:57 bonza sshd[930]: twist astro.kursastro.net to /bin/echo -e "\n\n\tAccess Denied from astro.kursastro.net\tSo kindly FOADAH\n";sleep 10 Nov 22 03:08:11 bonza sshd[939]: twist bno-84-242-66-10.karneval.cz to /bin/echo -e "\n\n\tAccess Denied from bno-84-242-66-10.karneval.cz\tSo kindly FOADAH\n";sleep 10
ROTFL! But where are they getting that string from? I tried adding your code, modified, to /etc/hosts.allow: #sshd : my.remote.ip : ALLOW #sshd : LOCAL : ALLOW sshd : ALL : twist /bin/echo -e "\n\n\tAccess Denied from %h\tSo kindly FOADAH\n";sleep 10 And when I try to log in, I see (with a delay): cer@nimrodel:~> ssh localhost ssh_exchange_identification: Connection closed by remote host cer@nimrodel:~> And the logs: Nov 22 12:27:43 nimrodel sshd[7056]: twist 127.0.0.1 to /bin/echo -e "\n\n\tAccess Denied from 127.0.0.1\tSo kindly FOADAH\n";sleep 10 So... the log entry is entirely local. They don't get any text message, but your log is filled with refuse :-p You'd better modify that line of yours ;-) - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAkkn7jQACgkQtTMYHG2NR9V8wQCfeXYRYUmkh4MpQh3SxBR9t9fM gZUAn0gFEbSRP1Vm9TYR/YMWnc9C1jxz =5Cag -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org