From 069f328ad52384ecfbabae1140236e3e343a1d06 Mon Sep 17 00:00:00 2001
From: Jonas Smedegaard <dr@jones.dk>
Date: Mon, 28 Nov 2005 09:58:11 +0000
Subject: Move strings about failed SSH login attempts to violations.d.

---
 logcheck/ignore.d.server/ssh | 3 ---
 1 file changed, 3 deletions(-)

(limited to 'logcheck/ignore.d.server/ssh')

diff --git a/logcheck/ignore.d.server/ssh b/logcheck/ignore.d.server/ssh
index bf1cf50..d64d593 100644
--- a/logcheck/ignore.d.server/ssh
+++ b/logcheck/ignore.d.server/ssh
@@ -9,6 +9,3 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: refused connect from .*
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Received disconnect from [\.0-9]+: 11: Disconnect requested by Windows SSH Client.$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: subsystem request for sftp$
-
-# Cracking attempts are too common, so clutters more than it helps to warn about them
-^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: (Failed password from illegal|Illegal) user [[:alnum:]]+ from [\.0-9]+( port [0-9]+ ssh2)?$
-- 
cgit v1.2.3