diff --git a/CHANGELOG b/CHANGELOG index 484fb093..fe550610 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -30,6 +30,7 @@ ver. 0.8.1 (2007/??/??) - stable Yaroslav Halchenko - Added filter file for named (bind9). Thanks to Yaroslav Halchenko +- Fixed vsftpd filter. Thanks to Yaroslav Halchenko ver. 0.8.0 (2007/05/03) - stable ---------- diff --git a/config/filter.d/vsftpd.conf b/config/filter.d/vsftpd.conf index 3c4bb11b..9f955fae 100644 --- a/config/filter.d/vsftpd.conf +++ b/config/filter.d/vsftpd.conf @@ -14,8 +14,8 @@ # (?:::f{4,6}:)?(?P\S+) # Values: TEXT # -failregex = vsftpd(?:\[\d+\])?: .* authentication failure; .* rhost=$ - \[.+\] FAIL LOGIN: Client ""$ +failregex = vsftpd(?:\[\d+\])?: .* authentication failure; .* rhost=\s*$ + \[.+\] FAIL LOGIN: Client ""\s*$ # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored.