# Denyhost erreur de synchronisation : ERROR \[Errno 110\] !

**URL:** <https://www.debian-fr.org/t/denyhost-erreur-de-synchronisation-error-errno-110/33537>\
**Category:** Trucs et Astuces\
**Created:** [Février 21, 2016, 3:09 UTC](https://www.debian-fr.org/t/denyhost-erreur-de-synchronisation-error-errno-110/33537 "2016-02-21T03:09:25Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![loreleil](https://www.debian-fr.org/letter_avatar_proxy/v4/letter/l/77aa72/32.png) [@loreleil](https://www.debian-fr.org/u/loreleil)\
**Post date:** [Février 21, 2016, 3:09 UTC](https://www.debian-fr.org/t/denyhost-erreur-de-synchronisation-error-errno-110/33537/1 "2016-02-21T03:09:25Z")

</div>

Saluts,

Moment privilégié, moment partagé. 😉

Un message d’erreur tels que celui-ci retourné par logcheck (où log etc …) … ?

> [@](#):
>
> Aug 14 13:10:16 - sync : ERROR [Errno 110] Connection timed out  
> Traceback (most recent call last):

J’ai trouvé x rapports de bug (“déclarés”) sur cette erreur (entre autre) [Errno 110] et post. Mais …

Rien de plus simple à corriger ! Me semble t-il … ![:033](https://www.debian-fr.org/uploads/default/original/1X/42cd8bd0447ecac24cdff1e26fa990a5c8442791.gif "petard")

Dans un premier temps.

Il suffisait de dé-commenter les lignes supplémentaires suivantes (en gras):

> [@](#):
>
> :~$ cat /etc/denyhosts.conf
> 
> ```
> ############ THESE SETTINGS ARE REQUIRED ############
> 
> ```
> 
> ###########################################################
> 
> # 
> 
> # SECURE\_LOG: the log file that contains sshd logging info
> 
> # if you are not sure, grep “sshd:” /var/log/\*
> 
> # 
> 
> # The file to process can be overridden with the --file command line
> 
> # argument
> 
> # 
> 
> # Redhat or Fedora Core:
> 
> #SECURE\_LOG = /var/log/secure
> 
> # 
> 
> # Mandrake, FreeBSD or OpenBSD:
> 
> #SECURE\_LOG = /var/log/auth.log
> 
> # 
> 
> # SuSE:
> 
> #SECURE\_LOG = /var/log/messages
> 
> # 
> 
> # Mac OS X (v10.4 or greater -
> 
> # also refer to: [denyhosts.net/faq.html#macos](http://www.denyhosts.net/faq.html#macos)
> 
> #SECURE\_LOG = /private/var/log/asl.log
> 
> # 
> 
> # Mac OS X (v10.3 or earlier):
> 
> #SECURE\_LOG=/private/var/log/system.log
> 
> # 
> 
> # Debian:
> 
> SECURE\_LOG = /var/log/auth.log  
> ######################################################  
> ######################################################
> 
> # 
> 
> # HOSTS\_DENY: the file which contains restricted host access information
> 
> # 
> 
> # Most operating systems:
> 
> #Inscription des IP bannies dansle fichier suivant  
> HOSTS\_DENY = /etc/hosts.deny
> 
> # 
> 
> # Some BSD (FreeBSD) Unixes:
> 
> #HOSTS\_DENY = /etc/hosts.allow
> 
> # 
> 
> # Another possibility (also see the next option):
> 
> #HOSTS\_DENY = /etc/hosts.evil  
> ######################################################  
> ######################################################
> 
> # 
> 
> # PURGE\_DENY: removed HOSTS\_DENY entries that are older than this time
> 
> # when DenyHosts is invoked with the --purge flag
> 
> # 
> 
> # format is: i[dhwmy]
> 
> # Where ‘i’ is an integer (eg. 7)
> 
> # ‘m’ = minutes
> 
> # ‘h’ = hours
> 
> # ‘d’ = days
> 
> # ‘w’ = weeks
> 
> # ‘y’ = years
> 
> # 
> 
> # never purge:
> 
> #Le fichier n’est jamais purgé  
> PURGE\_DENY =
> 
> # 
> 
> # purge entries older than 1 week
> 
> #Le fichier sera purgé au bout d’une semaine  
> #PURGE\_DENY = 1w
> 
> # 
> 
> # purge entries older than 5 days
> 
> #Le fichier sera purgé tous les 5 jours  
> #PURGE\_DENY = 5d  
> ######################################################  
> ######################################################
> 
> # 
> 
> # PURGE\_THRESHOLD: defines the maximum times a host will be purged.
> 
> # Once this value has been exceeded then this host will not be purged.
> 
> # Setting this parameter to 0 (the default) disables this feature.
> 
> # 
> 
> # default: a denied host can be purged/re-added indefinitely
> 
> #L’IP bannie pourra être purgée indéfiniement  
> #PURGE\_THRESHOLD = 0
> 
> # 
> 
> # a denied host will be purged at most 2 times.
> 
> #L’IP ne sera purgée que 2 fois après celle-ci sera bannie pour toujours  
> PURGE\_THRESHOLD = 2
> 
> # 
> 
> ########################################################  
> ########################################################
> 
> # 
> 
> # BLOCK\_SERVICE: the service name that should be blocked in HOSTS\_DENY
> 
> # 
> 
> # man 5 hosts\_access for details
> 
> # 
> 
> # eg. sshd: 127.0.0.1 # will block sshd logins from 127.0.0.1
> 
> # 
> 
> # To block all services for the offending host:
> 
> #Interdit l’accès à tous les services accessibles (pas seulement celui-ci attaqué)  
> BLOCK\_SERVICE = ALL
> 
> # To block only sshd:
> 
> #Bloque uniquement pour SSH  
> BLOCK\_SERVICE = sshd
> 
> # To only record the offending host and nothing else (if using
> 
> # an auxilary file to list the hosts). Refer to:
> 
> # [denyhosts.sourceforge.net/faq.html#aux](http://denyhosts.sourceforge.net/faq.html#aux)
> 
> #BLOCK\_SERVICE =
> 
> # 
> 
> ##########################################################  
> ##########################################################
> 
> # 
> 
> # DENY\_THRESHOLD\_INVALID: block each host after the number of failed login
> 
> # attempts has exceeded this value. This value applies to invalid
> 
> # user login attempts (eg. non-existent user accounts)
> 
> # 
> 
> #Bannie l’IP au bout de 5 tentatives infructueuses de login sur un compte non existant  
> DENY\_THRESHOLD\_INVALID = 1
> 
> # 
> 
> ##########################################################  
> ##########################################################
> 
> # 
> 
> # DENY\_THRESHOLD\_VALID: block each host after the number of failed
> 
> # login attempts has exceeded this value. This value applies to valid
> 
> # user login attempts (eg. user accounts that exist in /etc/passwd) except
> 
> # for the “root” user
> 
> # 
> 
> #Bannie l’IP au bout de 2 tentatives infructueuses sur un compte existant sauf root  
> DENY\_THRESHOLD\_VALID = 2
> 
> # 
> 
> ##########################################################  
> ##########################################################
> 
> # 
> 
> # DENY\_THRESHOLD\_ROOT: block each host after the number of failed
> 
> # login attempts has exceeded this value. This value applies to
> 
> # “root” user login attempts only.
> 
> # 
> 
> #Bannie l’IP au bout d’une seule erreur sur le compte root  
> DENY\_THRESHOLD\_ROOT = 1
> 
> # 
> 
> #########################################################  
> #########################################################
> 
> # 
> 
> # DENY\_THRESHOLD\_RESTRICTED: block each host after the number of failed
> 
> # login attempts has exceeded this value. This value applies to
> 
> # usernames that appear in the WORK\_DIR/restricted-usernames file only.
> 
> # 
> 
> DENY\_THRESHOLD\_RESTRICTED = 1
> 
> # 
> 
> #########################################################  
> #########################################################
> 
> # 
> 
> # WORK\_DIR: the path that DenyHosts will use for writing data to
> 
> # (it will be created if it does not already exist).
> 
> # 
> 
> # Note: it is recommended that you use an absolute pathname
> 
> # for this value (eg. /home/foo/denyhosts/data)
> 
> # 
> 
> WORK\_DIR = /var/lib/denyhosts
> 
> # 
> 
> #########################################################  
> #########################################################
> 
> # 
> 
> # SUSPICIOUS\_LOGIN\_REPORT\_ALLOWED\_HOSTS
> 
> # 
> 
> # SUSPICIOUS\_LOGIN\_REPORT\_ALLOWED\_HOSTS=YES|NO
> 
> # If set to YES, if a suspicious login attempt results from an allowed-host
> 
> # then it is considered suspicious. If this is NO, then suspicious logins
> 
> # from allowed-hosts will not be reported. All suspicious logins from
> 
> # ip addresses that are not in allowed-hosts will always be reported.
> 
> # 
> 
> SUSPICIOUS\_LOGIN\_REPORT\_ALLOWED\_HOSTS=YES  
> ########################################################  
> ########################################################
> 
> # 
> 
> # HOSTNAME\_LOOKUP
> 
> # 
> 
> # HOSTNAME\_LOOKUP=YES|NO
> 
> # If set to YES, for each IP address that is reported by Denyhosts,
> 
> # the corresponding hostname will be looked up and reported as well
> 
> # (if available).
> 
> # 
> 
> #Permet de vérifier si un domaine est associé à l’IP attaquante  
> HOSTNAME\_LOOKUP=YES
> 
> # 
> 
> ########################################################  
> ########################################################
> 
> # 
> 
> # LOCK\_FILE
> 
> # 
> 
> # LOCK\_FILE=/path/denyhosts
> 
> # If this file exists when DenyHosts is run, then DenyHosts will exit
> 
> # immediately. Otherwise, this file will be created upon invocation
> 
> # and deleted upon exit. This ensures that only one instance is
> 
> # running at a time.
> 
> # 
> 
> # Redhat/Fedora:
> 
> #LOCK\_FILE = /var/lock/subsys/denyhosts
> 
> # 
> 
> # Debian
> 
> LOCK\_FILE = /var/run/denyhosts.pid
> 
> # 
> 
> # Misc
> 
> #LOCK\_FILE = /tmp/denyhosts.lock
> 
> # 
> 
> ###########################################################
> 
> ```
> ############ THESE SETTINGS ARE OPTIONAL ############
> 
> ```
> 
> # 
> 
> # ADMIN\_EMAIL: if you would like to receive emails regarding newly
> 
> # restricted hosts and suspicious logins, set this address to
> 
> # match your email address. If you do not want to receive these reports
> 
> # leave this field blank (or run with the --noemail option)
> 
> # 
> 
> # Multiple email addresses can be delimited by a comma, eg:
> 
> # ADMIN\_EMAIL = [etc@foobar.com](mailto:etc@foobar.com)
> 
> # 
> 
> ADMIN\_EMAIL = [Mon\_Adresse@gmail.com](mailto:Mon_Adresse@gmail.com)
> 
> # 
> 
> ###################################################  
> ###################################################
> 
> # 
> 
> # SMTP\_HOST and SMTP\_PORT: if DenyHosts is configured to email
> 
> # reports (see ADMIN\_EMAIL) then these settings specify the
> 
> # email server address (SMTP\_HOST) and the server port (SMTP\_PORT)
> 
> # 
> 
> # 
> 
> SMTP\_HOST = localhost, [[smtp.gmail.com](http://smtp.gmail.com)]:587  
> SMTP\_PORT = 25,587
> 
> # 
> 
> ####################################################  
> ####################################################
> 
> # 
> 
> # SMTP\_USERNAME and SMTP\_PASSWORD: set these parameters if your
> 
> # smtp email server requires authentication
> 
> # 
> 
> #A utiliser si le serveur requiert une authentification avant l’envoi  
> SMTP\_USERNAME=pc-1-loreleil  
> SMTP\_PASSWORD=Mon\_Mot\_de\_Pass\_gmail
> 
> # 
> 
> ####################################################  
> ####################################################
> 
> # 
> 
> # SMTP\_FROM: you can specify the “From:” address in messages sent
> 
> # from DenyHosts when it reports thwarted abuse attempts
> 
> # 
> 
> #Configuration de l’expediteur  
> SMTP\_FROM = DenyHosts [root@localhost](mailto:root@localhost)
> 
> # 
> 
> #####################################################  
> #####################################################
> 
> # 
> 
> # SMTP\_SUBJECT: you can specify the “Subject:” of messages sent
> 
> # by DenyHosts when it reports thwarted abuse attempts
> 
> #Sujet du mail  
> SMTP\_SUBJECT = DenyHosts Report Avertissement & Warning !
> 
> # 
> 
> #####################################################  
> #####################################################
> 
> # 
> 
> # SMTP\_DATE\_FORMAT: specifies the format used for the “Date:” header
> 
> # when sending email messages.
> 
> # 
> 
> # for possible values for this parameter refer to: man strftime
> 
> # 
> 
> # the default:
> 
> # 
> 
> SMTP\_DATE\_FORMAT = %a, %d %b %Y %H:%M:%S %z
> 
> # 
> 
> ####################################################  
> ####################################################
> 
> # 
> 
> # SYSLOG\_REPORT
> 
> # 
> 
> # SYSLOG\_REPORT=YES|NO
> 
> # If set to yes, when denied hosts are recorded the report data
> 
> # will be sent to syslog (syslog must be present on your system).
> 
> # The default is: NO
> 
> # 
> 
> SYSLOG\_REPORT=YES
> 
> # 
> 
> # 
> 
> ###################################################  
> ###################################################
> 
> # 
> 
> # ALLOWED\_HOSTS\_HOSTNAME\_LOOKUP
> 
> # 
> 
> # ALLOWED\_HOSTS\_HOSTNAME\_LOOKUP=YES|NO
> 
> # If set to YES, for each entry in the WORK\_DIR/allowed-hosts file,
> 
> # the hostname will be looked up. If your versions of tcp\_wrappers
> 
> # and sshd sometimes log hostnames in addition to ip addresses
> 
> # then you may wish to specify this option.
> 
> # 
> 
> #ALLOWED\_HOSTS\_HOSTNAME\_LOOKUP=NO
> 
> # 
> 
> ###################################################  
> ###################################################
> 
> # 
> 
> # AGE\_RESET\_VALID: Specifies the period of time between failed login
> 
> # attempts that, when exceeded will result in the failed count for
> 
> # this host to be reset to 0. This value applies to login attempts
> 
> # to all valid users (those within /etc/passwd) with the
> 
> # exception of root. If not defined, this count will never
> 
> # be reset.
> 
> # 
> 
> # See the comments in the PURGE\_DENY section (above)
> 
> # for details on specifying this value or for complete details
> 
> # refer to: [denyhosts.sourceforge.net/faq.html#timespec](http://denyhosts.sourceforge.net/faq.html#timespec)
> 
> # 
> 
> #Période après laquelle un user autre que root existant pourra tenter de se reconnecter après son bannissement temporaire  
> AGE\_RESET\_VALID=5d
> 
> # 
> 
> #####################################################  
> #####################################################
> 
> # 
> 
> # AGE\_RESET\_ROOT: Specifies the period of time between failed login
> 
> # attempts that, when exceeded will result in the failed count for
> 
> # this host to be reset to 0. This value applies to all login
> 
> # attempts to the “root” user account. If not defined,
> 
> # this count will never be reset.
> 
> # 
> 
> # See the comments in the PURGE\_DENY section (above)
> 
> # for details on specifying this value or for complete details
> 
> # refer to: [denyhosts.sourceforge.net/faq.html#timespec](http://denyhosts.sourceforge.net/faq.html#timespec)
> 
> # 
> 
> #Période après laquelle root pourra tenter de se reconnecter après son bannissement temporaire  
> AGE\_RESET\_ROOT=25d
> 
> # 
> 
> #########################################################  
> #########################################################
> 
> # 
> 
> # AGE\_RESET\_RESTRICTED: Specifies the period of time between failed login
> 
> # attempts that, when exceeded will result in the failed count for
> 
> # this host to be reset to 0. This value applies to all login
> 
> # attempts to entries found in the WORK\_DIR/restricted-usernames file.
> 
> # If not defined, the count will never be reset.
> 
> # 
> 
> # See the comments in the PURGE\_DENY section (above)
> 
> # for details on specifying this value or for complete details
> 
> # refer to: [denyhosts.sourceforge.net/faq.html#timespec](http://denyhosts.sourceforge.net/faq.html#timespec)
> 
> # 
> 
> # 
> 
> AGE\_RESET\_RESTRICTED=25d
> 
> # 
> 
> ##################################################  
> ##################################################
> 
> # 
> 
> # AGE\_RESET\_INVALID: Specifies the period of time between failed login
> 
> # attempts that, when exceeded will result in the failed count for
> 
> # this host to be reset to 0. This value applies to login attempts
> 
> # made to any invalid username (those that do not appear
> 
> # in /etc/passwd). If not defined, count will never be reset.
> 
> # 
> 
> # See the comments in the PURGE\_DENY section (above)
> 
> # for details on specifying this value or for complete details
> 
> # refer to: [denyhosts.sourceforge.net/faq.html#timespec](http://denyhosts.sourceforge.net/faq.html#timespec)
> 
> # 
> 
> AGE\_RESET\_INVALID=10d
> 
> # 
> 
> ####################################################  
> ####################################################
> 
> # 
> 
> # RESET\_ON\_SUCCESS: If this parameter is set to “yes” then the
> 
> # failed count for the respective ip address will be reset to 0
> 
> # if the login is successful.
> 
> # 
> 
> # The default is RESET\_ON\_SUCCESS = no
> 
> # 
> 
> #Réinitiliase ou pas après une connexion réussie, je vous conseille fortement de ne pas changer la valeur de ce paramètre.  
> #RESET\_ON\_SUCCESS = yes
> 
> # 
> 
> ########################################################  
> ########################################################
> 
> # 
> 
> # PLUGIN\_DENY: If set, this value should point to an executable
> 
> # program that will be invoked when a host is added to the
> 
> # HOSTS\_DENY file. This executable will be passed the host
> 
> # that will be added as its only argument.
> 
> # 
> 
> #Cette option permet d’appeler un script après un bannissement d’IP  
> #PLUGIN\_DENY=/usr/bin/true
> 
> # 
> 
> ########################################################  
> ########################################################
> 
> # 
> 
> # PLUGIN\_PURGE: If set, this value should point to an executable
> 
> # program that will be invoked when a host is removed from the
> 
> # HOSTS\_DENY file. This executable will be passed the host
> 
> # that is to be purged as its only argument.
> 
> # 
> 
> #Cette option permet d’appeler un script après une purge d’IP bannie  
> #PLUGIN\_PURGE=/usr/bin/true
> 
> # 
> 
> ########################################################  
> ########################################################
> 
> # 
> 
> # USERDEF\_FAILED\_ENTRY\_REGEX: if set, this value should contain
> 
> # a regular expression that can be used to identify additional
> 
> # hackers for your particular ssh configuration. This functionality
> 
> # extends the built-in regular expressions that DenyHosts uses.
> 
> # This parameter can be specified multiple times.
> 
> # See this faq entry for more details:
> 
> # [denyhosts.sf.net/faq.html#userdef\_regex](http://denyhosts.sf.net/faq.html#userdef_regex)
> 
> # 
> 
> #USERDEF\_FAILED\_ENTRY\_REGEX=
> 
> # 
> 
> # 
> 
> ############################################################  
> ######### THESE SETTINGS ARE SPECIFIC TO DAEMON MODE ###  
> ############################################################
> 
> # 
> 
> # DAEMON\_LOG: when DenyHosts is run in daemon mode (–daemon flag)
> 
> # this is the logfile that DenyHosts uses to report its status.
> 
> # To disable logging, leave blank. (default is: /var/log/denyhosts)
> 
> # 
> 
> #Log les actions de DenyHost dans /var/log/denyhosts  
> DAEMON\_LOG = /var/log/denyhosts
> 
> # 
> 
> # disable logging:
> 
> #Désactive le loggage des actions  
> #DAEMON\_LOG =
> 
> # 
> 
> #################################################  
> #################################################
> 
> # 
> 
> # DAEMON\_LOG\_TIME\_FORMAT: when DenyHosts is run in daemon mode
> 
> # (–daemon flag) this specifies the timestamp format of
> 
> # the DAEMON\_LOG messages (default is the ISO8061 format:
> 
> # ie. 2005-07-22 10:38:01,745)
> 
> # 
> 
> # for possible values for this parameter refer to: man strftime
> 
> # 
> 
> # Jan 1 13:05:59
> 
> DAEMON\_LOG\_TIME\_FORMAT = %b %d %H:%M:%S
> 
> # 
> 
> # Jan 1 01:05:59
> 
> #DAEMON\_LOG\_TIME\_FORMAT = %b %d %I:%M:%S
> 
> # 
> 
> ################################################  
> ################################################
> 
> # 
> 
> # DAEMON\_LOG\_MESSAGE\_FORMAT: when DenyHosts is run in daemon mode
> 
> # (–daemon flag) this specifies the message format of each logged
> 
> # entry. By default the following format is used:
> 
> # 
> 
> # %(asctime)s - %(name)-12s: %(levelname)-8s %(message)s
> 
> # 
> 
> # Where the “%(asctime)s” portion is expanded to the format
> 
> # defined by DAEMON\_LOG\_TIME\_FORMAT
> 
> # 
> 
> # This string is passed to python’s logging.Formatter contstuctor.
> 
> # For details on the possible format types please refer to:
> 
> # [docs.python.org/lib/node357.html](http://docs.python.org/lib/node357.html)
> 
> # 
> 
> # This is the default:
> 
> #DAEMON\_LOG\_MESSAGE\_FORMAT = %(asctime)s - %(name)-12s: %(levelname)-8s %(message)s
> 
> # 
> 
> # 
> 
> ###################################################  
> ###################################################
> 
> # 
> 
> # DAEMON\_SLEEP: when DenyHosts is run in daemon mode (–daemon flag)
> 
> # this is the amount of time DenyHosts will sleep between polling
> 
> # the SECURE\_LOG. See the comments in the PURGE\_DENY section (above)
> 
> # for details on specifying this value or for complete details
> 
> # refer to: [denyhosts.sourceforge.net/faq.html#timespec](http://denyhosts.sourceforge.net/faq.html#timespec)
> 
> # 
> 
> # 
> 
> #Période pendant laquelle DenyHost ne met pas à jour ses fichiers suite à un clean des IP bannies  
> DAEMON\_SLEEP = 30s
> 
> # 
> 
> ###################################################  
> ###################################################
> 
> # 
> 
> # DAEMON\_PURGE: How often should DenyHosts, when run in daemon mode,
> 
> # run the purge mechanism to expire old entries in HOSTS\_DENY
> 
> # This has no effect if PURGE\_DENY is blank.
> 
> # 
> 
> #Temps entre chaque clean des IP bannies  
> DAEMON\_PURGE = 6h
> 
> # 
> 
> ####################################################  
> ######### THESE SETTINGS ARE SPECIFIC TO ##  
> ######### DAEMON SYNCHRONIZATION ##  
> ####################################################
> 
> # 
> 
> # Synchronization mode allows the DenyHosts daemon the ability
> 
> # to periodically send and receive denied host data such that
> 
> # DenyHosts daemons worldwide can automatically inform one
> 
> # another regarding banned hosts. This mode is disabled by
> 
> # default, you must uncomment SYNC\_SERVER to enable this mode.
> 
> # 
> 
> # for more information, please refer to:
> 
> # http:/denyhosts.sourceforge.net/faq.html#sync
> 
> # 
> 
> #############################################  
> #############################################
> 
> # 
> 
> # SYNC\_SERVER: The central server that communicates with DenyHost
> 
> # daemons. Currently, [denyhosts.net](http://denyhosts.net) is the only available server
> 
> # however, in the future, it may be possible for organizations to
> 
> # install their own server for internal network synchronization
> 
> # 
> 
> # To disable synchronization (the default), do nothing.
> 
> # 
> 
> # To enable synchronization, you must uncomment the following line:
> 
> #Permet de synchroniser son daemon DenyHost avec un autre ici celui de chez [denyhost.net](http://denyhost.net) en protocole XML RPC  
> SYNC\_SERVER = [xmlrpc.denyhosts.net:9911](http://xmlrpc.denyhosts.net:9911) ###########################################
> 
> # 
> 
> # SYNC\_INTERVAL: the interval of time to perform synchronizations if
> 
> # SYNC\_SERVER has been uncommented. The default is 1 hour.
> 
> # 
> 
> #Interval entre 2 synchonisations  
> SYNC\_INTERVAL = 1h   
> #############################################  
> #############################################
> 
> # 
> 
> # SYNC\_UPLOAD: allow your DenyHosts daemon to transmit hosts that have
> 
> # been denied? This option only applies if SYNC\_SERVER has
> 
> # been uncommented.
> 
> # The default is SYNC\_UPLOAD = yes
> 
> # 
> 
> #Voulez-vous transmettre les IP bannies au serveur précisez au-dessus (pensez à vérifier les droits du serveur distant)  
> #SYNC\_UPLOAD = no  
> SYNC\_UPLOAD = yes   
> ##############################################
> 
> # 
> 
> # SYNC\_DOWNLOAD: allow your DenyHosts daemon to receive hosts that have
> 
> # been denied by others? This option only applies if SYNC\_SERVER has
> 
> # been uncommented.
> 
> # The default is SYNC\_DOWNLOAD = yes
> 
> # 
> 
> #Pouvez-vous télécharger son fichier pour l’ajouter au votre  
> #SYNC\_DOWNLOAD = no  
> SYNC\_DOWNLOAD = yes   
> ##############################################
> 
> # 
> 
> # SYNC\_DOWNLOAD\_THRESHOLD: If SYNC\_DOWNLOAD is enabled this parameter
> 
> # filters the returned hosts to those that have been blocked this many
> 
> # times by others. That is, if set to 1, then if a single DenyHosts
> 
> # server has denied an ip address then you will receive the denied host.
> 
> # 
> 
> # See also SYNC\_DOWNLOAD\_RESILIENCY
> 
> # 
> 
> SYNC\_DOWNLOAD\_THRESHOLD = 10
> 
> # 
> 
> # The default is SYNC\_DOWNLOAD\_THRESHOLD = 3
> 
> # 
> 
> SYNC\_DOWNLOAD\_THRESHOLD = 3   
> ###############################################
> 
> # 
> 
> # SYNC\_DOWNLOAD\_RESILIENCY: If SYNC\_DOWNLOAD is enabled then the
> 
> # value specified for this option limits the downloaded data
> 
> # to this resiliency period or greater.
> 
> # 
> 
> # Resiliency is defined as the timespan between a hackers first known
> 
> # attack and its most recent attack. Example:
> 
> # 
> 
> # If the centralized [denyhosts.net](http://denyhosts.net) server records an attack at 2 PM
> 
> # and then again at 5 PM, specifying a SYNC\_DOWNLOAD\_RESILIENCY = 4h
> 
> # will not download this ip address.
> 
> # 
> 
> # However, if the attacker is recorded again at 6:15 PM then the
> 
> # ip address will be downloaded by your DenyHosts instance.
> 
> # 
> 
> # This value is used in conjunction with the SYNC\_DOWNLOAD\_THRESHOLD
> 
> # and only hosts that satisfy both values will be downloaded.
> 
> # This value has no effect if SYNC\_DOWNLOAD\_THRESHOLD = 1
> 
> # 
> 
> # The default is SYNC\_DOWNLOAD\_RESILIENCY = 5h (5 hours)
> 
> # 
> 
> # Only obtain hackers that have been at it for 2 days or more:
> 
> #SYNC\_DOWNLOAD\_RESILIENCY = 2d
> 
> # 
> 
> # Only obtain hackers that have been at it for 5 hours or more:
> 
> SYNC\_DOWNLOAD\_RESILIENCY = 5h   
> #############################################
> 
> :~$

Deuxième temps … non non ! ![:017](https://www.debian-fr.org/uploads/default/original/1X/7bbea83f89515ab7c7a738dddb86c4d4f140bd13.gif "reflechit") … pas un temps mort ! … 😒

Et !!! ![:116](https://www.debian-fr.org/uploads/default/original/1X/eae5ac515968d1af3d7141407139e6921afb85d3.gif "heu!") … Relancer !!! Après toute modification du fichier /etc/denyhosts.conf

```auto

# /etc/init.d/denyhosts restart

Restarting DenyHosts:Stopping DenyHosts: denyhosts.
Starting DenyHosts: denyhosts.

#
```

Bin voilà, je crois qu’on n’est pas trop mal, là !!! ![:whistle:](https://www.debian-fr.org/uploads/default/original/1X/899b2c331f8cc02517f77948602974610a95f952.gif "Whistle")

> [@](#):
>
> [logcheck] Debian-pc-1 2011-08-15 14:08 System Events
> 
> Aug 15 14:08:09 - denyhosts : INFO DenyHosts daemon is shutting down  
> Aug 15 14:08:10 - denyhosts : INFO DenyHosts launched with the following args:  
> Aug 15 14:08:10 - denyhosts : INFO /usr/sbin/denyhosts --daemon --purge --config=/etc/denyhosts.conf --config=/etc/denyhosts.conf  
> Aug 15 14:08:10 - prefs : INFO DenyHosts configuration settings:  
> Aug 15 14:08:10 - prefs : INFO ADMIN\_EMAIL: [Mon\_Adresse@gmail.com]  
> Aug 15 14:08:10 - prefs : INFO AGE\_RESET\_INVALID: [864000]  
> Aug 15 14:08:10 - prefs : INFO AGE\_RESET\_RESTRICTED: [2160000]  
> Aug 15 14:08:10 - prefs : INFO AGE\_RESET\_ROOT: [2160000]  
> Aug 15 14:08:10 - prefs : INFO AGE\_RESET\_VALID: [432000]  
> Aug 15 14:08:10 - prefs : INFO ALLOWED\_HOSTS\_HOSTNAME\_LOOKUP: [no]  
> Aug 15 14:08:10 - prefs : INFO BLOCK\_SERVICE: [sshd]  
> Aug 15 14:08:10 - prefs : INFO DAEMON\_LOG: [/var/log/denyhosts]  
> Aug 15 14:08:10 - prefs : INFO DAEMON\_LOG\_MESSAGE\_FORMAT: [%(asctime)s - %(name)-12s: %(levelname)-8s %(message)s]  
> Aug 15 14:08:10 - prefs : INFO DAEMON\_LOG\_TIME\_FORMAT: [%b %d %H:%M:%S]  
> Aug 15 14:08:10 - prefs : INFO DAEMON\_PURGE: [21600]  
> Aug 15 14:08:10 - prefs : INFO DAEMON\_SLEEP: [30]  
> Aug 15 14:08:10 - prefs : INFO DENY\_THRESHOLD\_INVALID: [1]  
> Aug 15 14:08:10 - prefs : INFO DENY\_THRESHOLD\_RESTRICTED: [1]  
> Aug 15 14:08:10 - prefs : INFO DENY\_THRESHOLD\_ROOT: [1]  
> Aug 15 14:08:10 - prefs : INFO DENY\_THRESHOLD\_VALID: [2]  
> Aug 15 14:08:10 - prefs : INFO FAILED\_ENTRY\_REGEX: [None]  
> Aug 15 14:08:10 - prefs : INFO FAILED\_ENTRY\_REGEX2: [None]  
> Aug 15 14:08:10 - prefs : INFO FAILED\_ENTRY\_REGEX3: [None]  
> Aug 15 14:08:10 - prefs : INFO FAILED\_ENTRY\_REGEX4: [None]  
> Aug 15 14:08:10 - prefs : INFO FAILED\_ENTRY\_REGEX5: [None]  
> Aug 15 14:08:10 - prefs : INFO FAILED\_ENTRY\_REGEX6: [None]  
> Aug 15 14:08:10 - prefs : INFO FAILED\_ENTRY\_REGEX7: [None]  
> Aug 15 14:08:10 - prefs : INFO HOSTNAME\_LOOKUP: [YES]  
> Aug 15 14:08:10 - prefs : INFO HOSTS\_DENY: [/etc/hosts.deny]  
> Aug 15 14:08:10 - prefs : INFO LOCK\_FILE: [/var/run/denyhosts.pid]  
> Aug 15 14:08:10 - prefs : INFO PLUGIN\_DENY: [None]  
> Aug 15 14:08:10 - prefs : INFO PLUGIN\_PURGE: [None]  
> Aug 15 14:08:10 - prefs : INFO PURGE\_DENY: [None]  
> Aug 15 14:08:10 - prefs : INFO PURGE\_THRESHOLD: [2]  
> Aug 15 14:08:10 - prefs : INFO RESET\_ON\_SUCCESS: [no]  
> Aug 15 14:08:10 - prefs : INFO SECURE\_LOG: [/var/log/auth.log]  
> Aug 15 14:08:10 - prefs : INFO SMTP\_DATE\_FORMAT: [%a, %d %b %Y %H:%M:%S %z]  
> Aug 15 14:08:10 - prefs : INFO SMTP\_FROM: [DenyHosts [root@localhost](mailto:root@localhost)]  
> Aug 15 14:08:10 - prefs : INFO SMTP\_HOST: [localhost, [[smtp.gmail.com](http://smtp.gmail.com)]:587]  
> Aug 15 14:08:10 - prefs : INFO SMTP\_PASSWORD: [xxxxxxxxxxxxxxxxyyyyyyyyyyyyyyyyyyyzzzzzzzzzzzzzzz]  
> Aug 15 14:08:10 - prefs : INFO SMTP\_PORT: [25,587]  
> Aug 15 14:08:10 - prefs : INFO SMTP\_SUBJECT: [DenyHosts Report Avertissement & Warning !]  
> Aug 15 14:08:10 - prefs : INFO SMTP\_USERNAME: [pc-1-loreleil]  
> Aug 15 14:08:10 - prefs : INFO SSHD\_FORMAT\_REGEX: [None]  
> Aug 15 14:08:10 - prefs : INFO SUCCESSFUL\_ENTRY\_REGEX: [None]  
> Aug 15 14:08:10 - prefs : INFO SUSPICIOUS\_LOGIN\_REPORT\_ALLOWED\_HOSTS: [YES]  
> Aug 15 14:08:10 - prefs : INFO SYNC\_DOWNLOAD: [yes]  
> Aug 15 14:08:10 - prefs : INFO SYNC\_DOWNLOAD\_RESILIENCY: [18000]  
> Aug 15 14:08:10 - prefs : INFO SYNC\_DOWNLOAD\_THRESHOLD: [3]  
> Aug 15 14:08:10 - prefs : INFO SYNC\_INTERVAL: [3600]  
> Aug 15 14:08:10 - prefs : INFO SYNC\_SERVER: [[xmlrpc.denyhosts.net:9911](http://xmlrpc.denyhosts.net:9911)]  
> Aug 15 14:08:10 - prefs : INFO SYNC\_UPLOAD: [yes]  
> Aug 15 14:08:10 - prefs : INFO SYSLOG\_REPORT: [YES]  
> Aug 15 14:08:10 - prefs : INFO WORK\_DIR: [/var/lib/denyhosts]  
> Aug 15 14:08:10 - denyhosts : INFO restricted: set([])  
> Aug 15 14:08:10 - denyhosts : INFO launching DenyHosts daemon (version 2.6)…  
> Aug 15 14:08:10 - denyhosts : INFO DenyHosts daemon is now running, pid: 16050  
> Aug 15 14:08:10 - denyhosts : INFO send daemon process a TERM signal to terminate cleanly  
> Aug 15 14:08:10 - denyhosts : INFO eg. kill -TERM 16050  
> Aug 15 14:08:10 - denyhosts : INFO monitoring log: /var/log/auth.log  
> Aug 15 14:08:10 - denyhosts : INFO sync\_time: 3600  
> Aug 15 14:08:10 - denyhosts : INFO purging of /etc/hosts.deny is disabled  
> Aug 15 14:08:10 - denyhosts : INFO sync\_time: : 3600  
> Aug 15 14:08:10 - denyhosts : INFO sync\_sleep\_ratio: 120

Voilà … c’est tout !!! ![:033](https://www.debian-fr.org/uploads/default/original/1X/42cd8bd0447ecac24cdff1e26fa990a5c8442791.gif "petard")

sauf erreur … ![:083](https://www.debian-fr.org/uploads/default/original/1X/d14bbab5e0eb9167fe7ed1d009c5a9b723425957.gif "yeux-ciel") … ![:023](https://www.debian-fr.org/uploads/default/original/1X/3c587556c0cc11389317c03a60788d77ceebd307.gif "OK") … ![:whistle:](https://www.debian-fr.org/uploads/default/original/1X/899b2c331f8cc02517f77948602974610a95f952.gif "Whistle")

… … …

-edit- … 15/08/2011 23h …

Oui ! un -edit- … à construire … ![:083](https://www.debian-fr.org/uploads/default/original/1X/d14bbab5e0eb9167fe7ed1d009c5a9b723425957.gif "yeux-ciel")

-edit- 21/08/2011

Leur serveur est en carafe, pour l’heure … ![:013](https://www.debian-fr.org/uploads/default/original/1X/086709e9e4d48f0fa24e42243bbce857fc2be47f.gif "colere")