Ensure that dropbear has verbose logging enabled

robzr / bearDropper

Busybox ash based log examination script w/ iptables firewall rule generation response (fail2ban for OpenWRT)

90 stars 34 forks source link

Ensure that dropbear has verbose logging enabled #4

Closed jschornick closed 7 years ago

jschornick commented 8 years ago

The "exit before auth" tracking assumes dropbear has logged the IP of the child connection. This only occurs when running in verbose mode, so ensure that it is enabled when we install.
Though restarting the main dropbear process should be harmless to existing connections, let the user handle it just in case.

jschornick commented 8 years ago

Hey Rob... thanks for making such a great fail2ban clone for Openwrt!

At first, I couldn't figure out why I was getting so many "malformed line" errors out of the box... though in hindsight it's clear that the IP isn't included in the "exit before auth" lines. You had the tracking code in place, but it didn't do any good without the missing log lines.

This change should make sure things are better configured by your install script, hopefully saving your future new users some head scratching.

robzr commented 7 years ago

Thanks!