From 854ebe278dcdef4f7164173f6388b9fcf3d2abf8 Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Sat, 6 Aug 2005 10:14:24 +0000 Subject: Illegal SSHv1 connections does not emit port number, it seems. --- logcheck/ignore.d.server/ssh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'logcheck/ignore.d.server/ssh') diff --git a/logcheck/ignore.d.server/ssh b/logcheck/ignore.d.server/ssh index 56e072a..bf1cf50 100644 --- a/logcheck/ignore.d.server/ssh +++ b/logcheck/ignore.d.server/ssh @@ -11,4 +11,4 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: subsystem request for sftp$ # Cracking attempts are too common, so clutters more than it helps to warn about them -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: (Failed password from illegal|Illegal) user [[:alnum:]]+ from [\.0-9]+ port [0-9]+( ssh2)?$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: (Failed password from illegal|Illegal) user [[:alnum:]]+ from [\.0-9]+( port [0-9]+ ssh2)?$ -- cgit v1.2.3