denyhosts 2.6_3 security =27

Script to thwart ssh attacks
Maintained by: janos.mohacsi@bsd.hu
Port Added: 11 Nov 2005 06:46:55

---

---

DenyHosts is a script intended to be run by *ix system administrators to 
help thwart ssh server attacks.

If you've ever looked at your ssh log (/var/log/auth.log ) you may be alarmed 
to see how many hackers attempted to gain access to your server. 
Denyhosts helps you:
- Parses /var/log/auth.log to find all login attempts
- Can be run from the command line, cron or as a daemon (new in 0.9)
- Records all failed login attempts for the user and offending host
- For each host that exceeds a threshold count, records the evil host
- Keeps track of each non-existent user (eg. sdada) when a login attempt failed.
- Keeps track of each existing user (eg. root) when a login attempt failed.
- Keeps track of each offending host (hosts can be purged )
- Keeps track of suspicious logins 
- Keeps track of the file offset, so that you can reparse the same file
- When the log file is rotated, the script will detect it 
- Appends /etc/hosts.allow
- Optionally sends an email of newly banned hosts and suspicious logins.
- Resolves IP addresses to hostnames, if you want

WWW:	http://denyhosts.sourceforge.net/

CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMon

---

Required To Build: lang/python26
Required To Run: lang/python26

---

To install the port: cd /usr/ports/security/denyhosts/ && make install clean
To add the package: pkg_add -r denyhosts

---

Configuration Options

     No options to configure

---

Master Sites:

http://heanet.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://sunet.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://iweb.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://switch.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://surfnet.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://kent.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://freefr.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://voxel.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://jaist.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://osdn.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://nchc.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://transact.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://softlayer.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://internode.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://biznetnetworks.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

http://ufpr.dl.sourceforge.net/project/denyhosts/denyhosts/2.6/

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

- Fix command_interpreter in the rc.d script

PR:             ports/143053
Submitted by:   Frank Wall <fw@moov.de>
Tweaked by:     Janos Mohacsi <mohacsi@niif.hu> (maintainer)
Corrected by:   pgollucci (myself)

- Switch SourceForge ports to the new File Release System: categories starting
with P,R,S

- Add a patch to correct the location of nologin.
- Bump PORTREVISION.

PR:             ports/129186
Submitted by:   Till Klampaeckel <till@php.net>
Approved by:    maintainer

 - Make Python 2.5.1 the default Python version
 - Add significantly better support in bsd.python.mk for working with
   Python Eggs and the easy_install system

Tested by:      pointyhat runs
Approved by:    pav (portmgr)
Most work by:   perky
Thanks to:      pav

- Update message file to display rc.conf
- Use SUB_FILES

PR:             113944
Submitted by:   Janos Mohacsi <janos.mohacsi@bsd.hu> (maintainer)

- Fix a DoS issue

PR:             ports/113942
Security:       http://www.ossec.net/en/attacking-loganalysis.html#denyhosts
Submitted by:   David Bestor <freebsd1 at indenial.com>
Approved by:    Janos Mohacsi <mohacsi at niif.hu> (maintainer)

- Update to 2.6

PR:             ports/107326
Submitted by:   Janos Mohacsi <janos.mohacsi@bsd.hu> (maintainer)

- Move patch from pre-configure to post-patch.
- Use denyhost.conf (FreeBSD's default config file) instead of denyhost.cfg.
- Bump PORTREVISION.

PR:             ports/105305
Submitted by:   Gea-Suan Lin <gslin_AT_gslin dot org>
Approved by:    maintainer (Mohacsi Janos)

Add a note to pkg-message warning users about potential problems
relating to default syslogd(8) behavior.

PR:             ports/102605
Submitted by:   Jeremie Le Hen <jeremie@le-hen.org>
Approved by:    maintainer timeout (5 weeks)

- Update to 2.5
  * ADMIN_EMAIL pref can now contain multiple email addresses delimited by a
    comma (white space is optional). eg. foo@bar.com, bar@foo.com,
    foobar@foo.com
  * fixed bug in denyfileutil: 'timestamp' is now initialized properly
  * daemon-control-dist: modified to work w/ non-default python versions.  You
    must change the PYTHON_BIN and #!/bin/env/python references if appropriate.
  * added a debug message when loading allowed-hosts fails.
  * fixed bug when reporting suspicious login activity.

PR:             ports/99636
Submitted by:   maintainer

- Update to 2.4b
- Add new rc.d script

PR:             96824
Submitted by:   Rui Lopes <rgl___ruilopes.com>
Approved by:    maintainer timeout (14 days)

Remove USE_REINPLACE from all categories starting with S

upgrade to 2.2

PR:             95044
Submitted by:   maintainer

Add denyhosts 1.1.2, script to thwart ssh attacks.

PR:             ports/88781
Submitted by:   Janos Mohacsi <janos.mohacsi.at.bsd.hu>

5 vulnerabilities affecting 16 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities