Arch Linux

naseito

Member

From: Barcelona, Spain

Registered: 2012-10-19

Posts: 2

sshguard and vsftpd

Im using:

systemd-212-1
sshguard-1.5-16
vsftpd-3.0.2-2

sshguard is working with SSH flawlessly reading the logs from systemd journal and blocking ips after several trys...but with vsftpd (logging at system journal and /var/log/vsftpd.log) its not working at all.

I followed the instructions from the wiki and the iptable chain is configured liked this:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
sshguard   tcp  --  anywhere             anywhere             tcp dpt:ssh
sshguard   tcp  --  anywhere             anywhere

Im really lost with it and not sure where to start looking.

Thanks and sorry for my english and my (limited) linux knowledge.

rydek

Member

Registered: 2014-04-10

Posts: 1

Re: sshguard and vsftpd

I'm wondering about the same

txemarix

Member

Registered: 2009-01-26

Posts: 3

Re: sshguard and vsftpd

With "journalctl --unit vsftpd.service", can you see something like that?

abr 11 01:31:19 HostName vsftpd[7939]: [trueuser] OK LOGIN: Client "127.0.0.1"
abr 11 01:31:35 HostName vsftpd[7951]: [fakeuser] FAIL LOGIN: Client "127.0.0.1"

If not, maybe syslog needs to be enabled with "syslog_enable=YES" on "/etc/vsftpd.conf"

Edited in 2019  to change hostname in code for privacy reasons.

Last edited by txemarix (2019-07-08 19:28:45)