PDA

View Full Version : Denyhosts banned ip return after removal??


statiic
5th November 2006, 22:50
Very strange.

I tested my denyhosts settings. And it worked properly. It bans my ip and I'm unable to connect anymore.

Now I deleted the line with my ip in hosts.deny and rebooted my server. And there it is.My ip is back in there.

How is this possible. Do I need to delete something else too?

falko
6th November 2006, 15:52
This is caused by

################################################## ####################
#
# AGE_RESET_VALID: Specifies the period of time between failed login
# attempts that, when exceeded will result in the failed count for
# this host to be reset to 0. This value applies to login attempts
# to all valid users (those within /etc/passwd) with the
# exception of root. If not defined, this count will never
# be reset.
#
# See the comments in the PURGE_DENY section (above)
# for details on specifying this value or for complete details
# refer to: http://denyhosts.sourceforge.net/faq.html#timespec
#
AGE_RESET_VALID=5d
#
################################################## ####################

################################################## ####################
#
# AGE_RESET_ROOT: Specifies the period of time between failed login
# attempts that, when exceeded will result in the failed count for
# this host to be reset to 0. This value applies to all login
# attempts to the "root" user account. If not defined,
# this count will never be reset.
#
# See the comments in the PURGE_DENY section (above)
# for details on specifying this value or for complete details
# refer to: http://denyhosts.sourceforge.net/faq.html#timespec
#
AGE_RESET_ROOT=25d
#
################################################## ####################

################################################## ####################
#
# AGE_RESET_INVALID: Specifies the period of time between failed login
# attempts that, when exceeded will result in the failed count for
# this host to be reset to 0. This value applies to login attempts
# made to any invalid username (those that do not appear
# in /etc/passwd). If not defined, count will never be reset.
#
# See the comments in the PURGE_DENY section (above)
# for details on specifying this value or for complete details
# refer to: http://denyhosts.sourceforge.net/faq.html#timespec
#
AGE_RESET_INVALID=10d
#
################################################## ####################

in your denyhosts.cfg.

statiic
6th November 2006, 21:30
Is it days or hours??

falko
7th November 2006, 17:55
d means days.

statiic
7th November 2006, 19:27
K thx for the help