From 376f348823666bc8750ba12938ca1165c23490c2 Mon Sep 17 00:00:00 2001 From: Cyril Jaquier Date: Tue, 3 Feb 2009 21:56:03 +0000 Subject: [PATCH] - Pull a commit from Yaroslav git repo. BF: addressing added bang to ssh log (closes: #512193). git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@726 a942ae1a-1317-0410-a47c-b1dcaea8d605 --- config/filter.d/sshd.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/filter.d/sshd.conf b/config/filter.d/sshd.conf index 2993b30f..596837ba 100644 --- a/config/filter.d/sshd.conf +++ b/config/filter.d/sshd.conf @@ -31,7 +31,7 @@ failregex = ^%(__prefix_line)s(?:error: PAM: )?Authentication failure for .* fro ^%(__prefix_line)sUser \S+ from not allowed because not listed in AllowUsers$ ^%(__prefix_line)sauthentication failure; logname=\S* uid=\S* euid=\S* tty=\S* ruser=\S* rhost=(?:\s+user=.*)?\s*$ ^%(__prefix_line)srefused connect from \S+ \(\)\s*$ - ^%(__prefix_line)sAddress .* POSSIBLE BREAK-IN ATTEMPT\s*$ + ^%(__prefix_line)sAddress .* POSSIBLE BREAK-IN ATTEMPT!*\s*$ ^%(__prefix_line)sUser \S+ from not allowed because none of user's groups are listed in AllowGroups$ # Option: ignoreregex