Probably won't matter, as most of them are scripts... -Tom -----Original Message----- From: redhat-list-bounces@xxxxxxxxxx [mailto:redhat-list-bounces@xxxxxxxxxx]On Behalf Of Ryan Golhar Sent: Friday, April 15, 2005 11:28 AM To: Burke, Thomas G.; 'General Red Hat Linux discussion list' Subject: RE: How to display IP of ssh user in message? My message might have been a bit confusing. When a user logs in via ssh, a message can be displayed. I forget what file this is in. I want to add their IP address to the message so they know that we know where they are coming from... -----Original Message----- From: Burke, Thomas G. [ mailto:tg.burke@xxxxxxx] Sent: Friday, April 15, 2005 11:15 AM To: golharam@xxxxxxxxx; General Red Hat Linux discussion list Subject: RE: How to display IP of ssh user in message? This data shows up in one of the other logs - not sure which off the top of my head, tho. -Tom -----Original Message----- From: redhat-list-bounces@xxxxxxxxxx [ mailto:redhat-list-bounces@xxxxxxxxxx]On Behalf Of Ryan Golhar Sent: Friday, April 15, 2005 11:02 AM To: 'General Red Hat Linux discussion list' Subject: How to display IP of ssh user in message? Hi all, I notice in our logs that we get a large amount of failed attempts to log in. Short of blocking these domains using iptables, I was wondering if there is a way to display the IP address of the user logging in, in a message so they know we have their IP address? sshd: Invalid Users: Unknown Account: 602 Time(s) Authentication Failures: xfs (138.67-18-71.reverse.theplanet.com ): 1 Time(s) root (nitrogen.umdnj.edu ): 1 Time(s) root (138.67-18-71.reverse.theplanet.com ): 1 Time(s) unknown (138.67-18-71.reverse.theplanet.com ): 595 Time(s) unknown (218.153.147.92 ): 6 Time(s) daemon (138.67-18-71.reverse.theplanet.com ): 1 Time(s) root (218.153.147.92 ): 3 Time(s) rpc (138.67-18-71.reverse.theplanet.com ): 1 Time(s) unknown (10.136.16.244 ): 1 Time(s) smmsp (138.67-18-71.reverse.theplanet.com ): 1 Time(s) -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subjecthttps://www.redhat.com/mailman/listinfo/redhat-list