NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Problems with blocklistd: user error?



Hi,

I've set up blocklistd on quite a few machines so far, and it has mostly been straightforward and without issues. On the other hand, a few people have locked themselves out and I can't figure out how or why from what I see in the logs. Now it has happened to me, and I'm still clueless.

Here's my sshd entry in blocklistd.conf:

[local]
ssh		stream	tcp	*		*	4	96h
ssh		stream	tcp6	*		*	4	96h


And here are all of the entries in /var/log/authlog with my IP:

Jun 23 16:09:13 anath sshd[1665]: SSH: Server;Ltype: Kex;Remote: 47.156.146.32-47840;Enc: chacha20-poly1305%openssh.com@localhost;MAC: (null);Comp: none [preauth] Jun 23 16:09:14 anath sshd[1665]: SSH: Server;Ltype: Authname;Remote: 47.156.146.32-47840;Name: john [preauth] Jun 23 16:09:14 anath sshd[1665]: Accepted publickey for john from 47.156.146.32 port 47840 ssh2: ED25519 SHA256:... Jun 23 16:33:45 anath sshd[2524]: Received disconnect from 47.156.146.32 port 47840:11: disconnected by user Jun 23 16:33:45 anath sshd[2524]: Disconnected from user john 47.156.146.32 port 47840 Jun 23 17:06:35 anath sshd[3762]: Received disconnect from 47.156.146.32 port 31495:11: disconnected by user Jun 23 17:06:35 anath sshd[3762]: Disconnected from user john 47.156.146.32 port 31495


Any ideas about what caused blocklistd to decide that my rather normal activity was not good?

Thanks,
John


Home | Main Index | Thread Index | Old Index