From bbce308fe2b1f48db8cf2e3de148f00a46af9d50 Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Thu, 15 Dec 2005 10:12:21 +0000 Subject: Ignore another postfix dyndns blocking. Ignore illegal SSH logins also for SSHv1 --- logcheck/ignore.d.server/tmp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'logcheck/ignore.d.server/tmp') diff --git a/logcheck/ignore.d.server/tmp b/logcheck/ignore.d.server/tmp index b2dc9e0..0389ed6 100644 --- a/logcheck/ignore.d.server/tmp +++ b/logcheck/ignore.d.server/tmp @@ -61,4 +61,4 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ -- MARK -- $ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /USR/SBIN/CRON\[[0-9]+\]: \(root\) CMD \(test -x /usr/sbin/logcheck && nice -n10 /usr/sbin/logcheck\) $ ## SSH -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Failed password for illegal user [^[:space:]]+ from [.0-9]+ port [0-9]+ ssh2$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Failed password for illegal user [^[:space:]]+ from [.0-9]+( port [0-9]+ ssh2)?$ -- cgit v1.2.3