summaryrefslogtreecommitdiff
path: root/logcheck/ignore.d.server
diff options
context:
space:
mode:
authorJonas Smedegaard <dr@jones.dk>2005-12-15 10:12:21 +0000
committerJonas Smedegaard <dr@jones.dk>2005-12-15 10:12:21 +0000
commitbbce308fe2b1f48db8cf2e3de148f00a46af9d50 (patch)
treef306d122a58ed6c4a7c552d5ea69bff9348809bd /logcheck/ignore.d.server
parent350bf8d1ebb676b7378ebe4af9a1f0978191f2ac (diff)
Ignore another postfix dyndns blocking. Ignore illegal SSH logins also for SSHv1
Diffstat (limited to 'logcheck/ignore.d.server')
-rw-r--r--logcheck/ignore.d.server/local2
-rw-r--r--logcheck/ignore.d.server/tmp2
2 files changed, 2 insertions, 2 deletions
diff --git a/logcheck/ignore.d.server/local b/logcheck/ignore.d.server/local
index f332d00..07ee8f3 100644
--- a/logcheck/ignore.d.server/local
+++ b/logcheck/ignore.d.server/local
@@ -310,6 +310,6 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ amavis\[[0-9]+\]: warning - MIME::Parser error: .*
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ -- MARK -- $
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /USR/SBIN/CRON\[[0-9]+\]: \(root\) CMD \(test -x /usr/sbin/logcheck && nice -n10 /usr/sbin/logcheck\) $
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Failed password for illegal user [^[:space:]]+ from [.0-9]+ port [0-9]+ ssh2$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Failed password for illegal user [^[:space:]]+ from [.0-9]+( port [0-9]+ ssh2)?$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ ucd-snmp\[[0-9]+\]: Connection from .*
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ uptimed: moving up to position [0-9]+: [0-9]+ days, [0-9:]+
diff --git a/logcheck/ignore.d.server/tmp b/logcheck/ignore.d.server/tmp
index b2dc9e0..0389ed6 100644
--- a/logcheck/ignore.d.server/tmp
+++ b/logcheck/ignore.d.server/tmp
@@ -61,4 +61,4 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ -- MARK -- $
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /USR/SBIN/CRON\[[0-9]+\]: \(root\) CMD \(test -x /usr/sbin/logcheck && nice -n10 /usr/sbin/logcheck\) $
## SSH
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Failed password for illegal user [^[:space:]]+ from [.0-9]+ port [0-9]+ ssh2$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Failed password for illegal user [^[:space:]]+ from [.0-9]+( port [0-9]+ ssh2)?$