Home › Forums › BlockHosts

Please help me get this working.

Tue, 2007–Jun–05

I have blockhosts 2.0.3 installed on os x 10.4.9

When I try to access ssh from another machine on the local network, I get this in blockhosts.log

blockhosts 2.0.3 started: 2007-06-05 14:41:47 EDT
... echo tag: 192.168.1.27-sshd@192.168.1.39
... load blockfile: /etc/hosts.allow
... found both markers, count of hosts being watched: 0
... loading log file, offset: /var/log/auth.log 0
... will discard all host entries older than 2007-06-05 02:41:47 EDT
... updates: counts: hosts to block: 0; hosts being watched: 0

However, in console.log i get this

blockhosts: FATAL ERROR: Can't open or read: /var/log/auth.log

Why am I getting this error and how can I fix it?

Thanks greatly for your help,

steve

‹ nighttime attack Problem when starting up the blockhosts.py ›
Tue, 2007-06-05 16:58 — Anonymous (not verified)

Is file readable?

Is the /var/log/auth.log file readable by the blockhosts program?

What are the permissions on that file?

Wed, 2007-06-06 08:37 — Anonymous (not verified)

Here are the permissions

for auth.log and blockhosts.log

-rw-r--r-- 1 root wheel 0 Jun 5 14:37 auth.log
-rw-r--r-- 1 root wheel 14670 Jun 5 16:23 blockhosts.log

Does this help?

Wed, 2007-06-06 12:50 — Anonymous (not verified)

I think I figured this out

OS X stores ssh logins in /var/logs/secure.log

All I had to do was change the LOGFILES entry and it seems to work. I tried to login via ssh from a machine on the local net using the wrong name and password. On the 4th try my connection was denied.

If anyone else is trying to set this up on OS X 10.4, make sure you use the above listed log file.

Now to do some further testing.....

Steve