RE: How to display IP of ssh user in message?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Probably won't matter, as most of them are scripts...
 
    -Tom

-----Original Message-----
From: redhat-list-bounces@xxxxxxxxxx [mailto:redhat-list-bounces@xxxxxxxxxx]On Behalf Of Ryan Golhar
Sent: Friday, April 15, 2005 11:28 AM
To: Burke, Thomas G.; 'General Red Hat Linux discussion list'
Subject: RE: How to display IP of ssh user in message?



My message might have been a bit confusing.  When a user logs in via 
ssh, a message can be displayed.  I forget what file this is in.  I want 
to add their IP address to the message so they know that we know where 
they are coming from...  
  
  
  
-----Original Message----- 
From: Burke, Thomas G. [ mailto:tg.burke@xxxxxxx] 
Sent: Friday, April 15, 2005 11:15 AM 
To: golharam@xxxxxxxxx; General Red Hat Linux discussion list 
Subject: RE: How to display IP of ssh user in message? 



This data shows up in one of the other logs - not sure which off the top 
of my head, tho. 
  
    -Tom 

-----Original Message----- 
From: redhat-list-bounces@xxxxxxxxxx 
[ mailto:redhat-list-bounces@xxxxxxxxxx]On Behalf Of Ryan Golhar 
Sent: Friday, April 15, 2005 11:02 AM 
To: 'General Red Hat Linux discussion list' 
Subject: How to display IP of ssh user in message? 



Hi all, 

I notice in our logs that we get a large amount of failed attempts to 
log in.  Short of blocking these domains using iptables, I was wondering 

if there is a way to display the IP address of the user logging in, in a 

message so they know we have their IP address?  

sshd: 
   Invalid Users: 
      Unknown Account: 602 Time(s) 
   Authentication Failures: 
      xfs (138.67-18-71.reverse.theplanet.com ): 1 Time(s) 
      root (nitrogen.umdnj.edu ): 1 Time(s) 
      root (138.67-18-71.reverse.theplanet.com ): 1 Time(s) 
      unknown (138.67-18-71.reverse.theplanet.com ): 595 Time(s) 
      unknown (218.153.147.92 ): 6 Time(s) 
      daemon (138.67-18-71.reverse.theplanet.com ): 1 Time(s) 
      root (218.153.147.92 ): 3 Time(s) 
      rpc (138.67-18-71.reverse.theplanet.com ): 1 Time(s) 
      unknown (10.136.16.244 ): 1 Time(s) 
      smmsp (138.67-18-71.reverse.theplanet.com ): 1 Time(s) 



-- 
redhat-list mailing list 
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe 
https://www.redhat.com/mailman/listinfo/redhat-list 

-- 
redhat-list mailing list 
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe 
https://www.redhat.com/mailman/listinfo/redhat-list 

-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subjecthttps://www.redhat.com/mailman/listinfo/redhat-list


[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux