Hi,
I'm configuring DenyHosts to protect myself from brute force ssh attacks after noticing my machine sat on the web had some attempts from an IP in china.
I've installed and configured and its running fine after some initial .lock file problems.
The wierd thing is it puts the IP address of my main desktop machine (which I use to connect via public key) straight into the /etc/hosts.deny file. Even wierder is that I can still connect despite this!
If I manually remove the false entry from /etc/hosts.deny, denyhosts will shove it back in there within 10 seconds.
Any ideas? I'm totally stumped why it is doing this, and more important perhaps, why /etc/hosts.deny isn't denying access from my desktop machine.
The entry looks like;
sshd : x.x.x.x
The only thing may be causing a problem is that my ssh port is off 22.
I'm configuring DenyHosts to protect myself from brute force ssh attacks after noticing my machine sat on the web had some attempts from an IP in china.
I've installed and configured and its running fine after some initial .lock file problems.
The wierd thing is it puts the IP address of my main desktop machine (which I use to connect via public key) straight into the /etc/hosts.deny file. Even wierder is that I can still connect despite this!
If I manually remove the false entry from /etc/hosts.deny, denyhosts will shove it back in there within 10 seconds.
Any ideas? I'm totally stumped why it is doing this, and more important perhaps, why /etc/hosts.deny isn't denying access from my desktop machine.
The entry looks like;
sshd : x.x.x.x
The only thing may be causing a problem is that my ssh port is off 22.
Still randomly shoves my desktop's IP into there...