[Logcheck-commits] r1462 - in logcheck/trunk: debian rulefiles/linux/ignore.d.server

madduck at users.alioth.debian.org madduck at users.alioth.debian.org
Sun Jan 21 17:15:41 CET 2007


Author: madduck
Date: 2007-01-21 17:15:41 +0100 (Sun, 21 Jan 2007)
New Revision: 1462

Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/rulefiles/linux/ignore.d.server/ssh
Log:
* ignore.d.server/ssh: ignore messages related to Allow/DenyUsers
  (closes: #407009).

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2007-01-20 18:04:14 UTC (rev 1461)
+++ logcheck/trunk/debian/changelog	2007-01-21 16:15:41 UTC (rev 1462)
@@ -15,8 +15,10 @@
 
   * ignore.d.server/ssh: ignore messages about invalid users even with <!>
     characters in the usernames.
+  * ignore.d.server/ssh: ignore messages related to Allow/DenyUsers
+    (closes: #407009).
 
- -- martin f. krafft <madduck at debian.org>  Sat, 20 Jan 2007 18:03:34 +0000
+ -- martin f. krafft <madduck at debian.org>  Sun, 21 Jan 2007 16:15:08 +0000
 
 logcheck (1.2.53) unstable; urgency=low
 

Modified: logcheck/trunk/rulefiles/linux/ignore.d.server/ssh
===================================================================
--- logcheck/trunk/rulefiles/linux/ignore.d.server/ssh	2007-01-20 18:04:14 UTC (rev 1461)
+++ logcheck/trunk/rulefiles/linux/ignore.d.server/ssh	2007-01-21 16:15:41 UTC (rev 1462)
@@ -25,3 +25,5 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Disconnecting: Corrupted MAC on input\.$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Disconnecting: Bad packet length [[:digit:]]+\.$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Bad protocol version identification '[^']+' from ([:[:xdigit:].]+|UNKNOWN)+$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: User [-_.[:alnum:]]+ from [-_.[:alnum:]]+ not allowed because not listed in AllowUsers$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: User [-_.[:alnum:]]+ from [-_.[:alnum:]]+ not allowed because listed in DenyUsers$




More information about the Logcheck-commits mailing list