BSD Ports

security/sshguard 2.6.0,1 FreeBSD

Protect hosts from brute-force attacks against SSH and other services

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
eeeb4cc3dc
License
BSD2CLAUSE
Categories
security
Package size
396.9 KiB, 1732.3 KiB installed

Description

SSHGuard protects hosts from brute-force attacks against SSH and other services. It aggregates system logs and blocks repeat offenders using one of several firewall backends.

In the other systems

SystemPortVersion
FreeBSDsecurity/sshguard2.6.0,1
OpenBSDsecurity/sshguard2.6.0
NetBSDsecurity/sshguard2.4.2
DragonFlysecurity/sshguard2.4.3_3,1
MidnightBSDsecurity/sshguard2.5.1
HardenedBSDsecurity/sshguard2.5.1_2,1
GhostBSDsecurity/sshguard2.5.1,1

Install

Binary package:

pkg install sshguard

From the ports tree:

cd /usr/ports/security/sshguard/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	sshguard>0:security/sshguard

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest2.5.1_2,12.5.1_2,12.4.2_2,12.5.1,12.5.1_2,1
FreeBSD:14:quarterly2.5.1_2,12.5.1_2,1n/a2.5.1,12.5.1_2,1
FreeBSD:15:latest2.5.1_2,12.5.1_2,1n/a2.5.1,12.5.1,1
FreeBSD:15:quarterly2.5.1_2,12.5.1_2,1n/an/an/a
FreeBSD:16:latest2.5.1_2,12.5.1_2,1n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

No port depends on this one.

Configuration

No options to configure.

Service scripts
sshguard

Message after installing

To enable SSHGuard at startup, add the following line to your 'rc.conf':
sshguard_enable="YES"

Starting SSHGuard through syslogd(8) is discouraged and not supported.

Configure SSHGuard by editing BACKEND in '/usr/local/etc/sshguard.conf'. See
sshguard-setup(7) for instructions on setting up your firewall.

Please note that a few rc script parameters have been renamed to
better reflect the documentation:

sshguard_safety_thresh -> sshguard_danger_thresh
sshguard_pardon_min_interval -> sshguard_release_interval
sshguard_prescribe_interval -> sshguard_reset_interval

Files

Manual pages 2
  • sshguard(8)
  • sshguard-setup(7)
pkg-plist 16
  • @sample etc/sshguard.conf.sample
  • sbin/sshguard
  • libexec/sshg-blocker
  • libexec/sshg-fw-firewalld
  • libexec/sshg-fw-hosts
  • libexec/sshg-fw-ipfilter
  • libexec/sshg-fw-ipfw
  • libexec/sshg-fw-ipset
  • libexec/sshg-fw-iptables
  • libexec/sshg-fw-nft-sets
  • libexec/sshg-fw-null
  • libexec/sshg-fw-pf
  • libexec/sshg-logtail
  • libexec/sshg-parser
  • share/man/man7/sshguard-setup.7.gz
  • share/man/man8/sshguard.8.gz
distinfo 1
FileSizeSHA256
sshguard-2.6.0.tar.gz99026717cf44e29ce7853bd2df1425785947a097eda1d4f87ffb03a92d4c98bae4654d
Master sites 1
  • SF/sshguard/sshguard/${PORTVERSION}

Commit history 3

DateCommitCreditsLog message
eeeb4cc3dc Kevin Zheng security/sshguard: Update 2.5.1 => 2.6.0
Changelog: https://github.com/SSHGuard/sshguard/blob/v2.6.0/CHANGELOG.rst PR: 299605 Sponsored by: UNIS Labs (vvd, commit patch)
15f83b9d89 SASAKI Katuhiro security/sshguard: Backport upstream patch
To fix HOSTNAME field in syslog header handling. PR: 298836 Approved by: Kevin Zheng <[email protected]> (maintainer) Approved by: osa, vvd (Mentors, implicit) MFH: 2026Q3
79e6862d9b Kevin Zheng security/sshguard: Add default "NO" to rcvar
Without a default rcvar set to NO, there are warnings like this: /etc/rc: WARNING: $sshguard_enable is not set properly - see rc.conf(5)? PR: 298781 Approved by: osa, vvd (Mentors, implicit) MFH: 2026Q3