Re: intrusion via ssh

[Angelina Carlton <brat@magma.ca>]

On Thu, Mar 31, 2005 at 06:32:37PM +0200, Michelle Konzack wrote:
> 
> Be happy...
> Today I have gotten more then 3000 of this...
> 18 MByte of "/var/log/sshd.log".
> 

Hi Michelle, 
can you descibe to me how to make all sshd activity log
to /var/log/sshd.log ? My woody server logs it auth.log
which is fine I suppose but I woul much rather have sshd.log

my sshd_config has:

# Logging                                                                                                            
SyslogFacility AUTH                                                                                                  
LogLevel INFO    

I would imagine that needs changing to something, but syslog would need to 
be changed also? and what about logrotate?

TIA
-- 
Angelina Carlton