From 3200071c08ef8f0782ddc0c9e18131a9ef954b58 Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Mon, 28 Nov 2005 20:44:20 +0000 Subject: Correct typo(?) in sshd illegal user string. --- logcheck/violations.ignore.d/local | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'logcheck') diff --git a/logcheck/violations.ignore.d/local b/logcheck/violations.ignore.d/local index 21aa173..aecded7 100644 --- a/logcheck/violations.ignore.d/local +++ b/logcheck/violations.ignore.d/local @@ -105,4 +105,4 @@ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Failed (keyboard-interactive/pam|password) for sm from ::ffff:81.19.251.(69|74) port [[:digit:]]+ ssh2$ # Cracking attempts are too common, so clutters more than it helps to warn about them -^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: (Failed password from illegal|Illegal) user [[:alnum:]]+ from [\.0-9]+( port [0-9]+ ssh2)?$ +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: (Failed password for illegal|Illegal) user [[:alnum:]]+ from [\.0-9]+( port [0-9]+ ssh2)?$ -- cgit v1.2.3