When my logs are rotated will DenyHosts work properly?
Yes. DenyHosts checks the first line of your sshd server log file and the file size. It then compares these values to the previous invocation of DenyHosts. • If the first line is different, then DenyHosts will process the entire log file (since it is assumed that the log has been rotated). • If the first line is the same it then compares the file size to the last runs offset. • If they are the same, then DenyHosts assumes that there are no changes and exits. • If the current file size is greater then the last offset, then the log file is processed from the last offset. • When DenyHosts exits it stores the first line of the processed log file and the file offset into the offset file (which is located in the WORK_DIR that is defined in your denyhosts.cfg file).
