On Wed, 27 Jul 2011 21:52:24 +1000 Simon Perry <arch@xxxxxxxxxxx> wrote: > On 27/07/11, Renato wrote: > > | no, didn't know it conflicted with lastb. However, stopping it > doesn't | change the situtation, bad logins aren't logged > to /var/log/btmp. | > | Can I configure syslog-ng to report bad login attempts? > > Dude, it's not syslog-ng. > > Read the man pages, for example "man lastb" says: > > NOTES > The files wtmp and btmp might not be found. The system only logs > information in these files if they are present. This is a > local configuration issue. If you want the files to be used, they > can be created with a simple touch(1) command (for example, > touch /var/log/wtmp). > > These are also clues (in the same man page): > > SEE ALSO > shutdown(8), login(1), init(8) > sorry, I think I don't understand what you're saying, maybe my english isn't very good. the files /var/log/wtmp and /var/log/btmp are indeed present in my system cheers renato