Brute Force Monitor blocking reverse IP lookups

PNVGroup

Verified User
Joined
Jun 14, 2010
Messages
13
Hi!

We installed a new DA server (our 4th one) and are having trouble with BFM. On our previous intallations BFM only logged IPs, but on our new installation BFM logs reverse IP lookup strings (and NOT IP addresses). These failed login attempts then do not get blocked, because DA obviously cant block rDNS lookup strings (only IPs). How can we change this?

Regards,
Rok
 
Hello,

Is it about brute-force attempts to SSH?

If yes, then set

Code:
UseDNS no

in /etc/ssh/sshd_config and restart sshd.
 
You might want to report this issue to Directadmin developers, so that they filter IPs from logs skipping hostnames.
 
Back
Top