On Debian Squeeze I have sshd set up to not permit password logins and require key based authentication.
I notice that when I attempt to log in from the WAN into my box with a bad SSH key, I do not get the "Failed publickey...." message in auth.log. I only get "Connection from...." logged and that's it.
When I log in from within my LAN to my box with a bad key, I do get "Failed publickey...." logged. I want to be able to log all failed publickey attempts to SSH.
Does anyone have any advice as to why it's not logging failed keys from the WAN?