diff options
| author | Jonas Smedegaard <dr@jones.dk> | 2005-11-28 20:44:20 +0000 |
|---|---|---|
| committer | Jonas Smedegaard <dr@jones.dk> | 2005-11-28 20:44:20 +0000 |
| commit | 3200071c08ef8f0782ddc0c9e18131a9ef954b58 (patch) | |
| tree | 6f44eeeaa6a3b326b2461842bfbf8eb0c16197e7 /logcheck | |
| parent | e124134a8fd658182f1154724f207f65d3d49327 (diff) | |
Correct typo(?) in sshd illegal user string.
Diffstat (limited to 'logcheck')
| -rw-r--r-- | logcheck/violations.ignore.d/local | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/logcheck/violations.ignore.d/local b/logcheck/violations.ignore.d/local index 21aa173..aecded7 100644 --- a/logcheck/violations.ignore.d/local +++ b/logcheck/violations.ignore.d/local @@ -105,4 +105,4 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Failed (keyboard-interactive/pam|password) for sm from ::ffff:81.19.251.(69|74) port [[:digit:]]+ ssh2$ # Cracking attempts are too common, so clutters more than it helps to warn about them -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: (Failed password from illegal|Illegal) user [[:alnum:]]+ from [\.0-9]+( port [0-9]+ ssh2)?$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: (Failed password for illegal|Illegal) user [[:alnum:]]+ from [\.0-9]+( port [0-9]+ ssh2)?$ |