github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

ENH: logs/sshd -- have ":" after [daemon] (other uses are uncommon) 

See https://github.com/fail2ban/fail2ban/issues/216\#issuecomment-17535577
for the analysis
pull/217/merge
Yaroslav Halchenko 2013-05-07 12:30:05 -04:00
parent ffcac2ccee
commit 5e1d8b07e8
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
testcases/files/logs/sshd
View File

@ -14,7 +14,8 @@ Jan 5 01:31:41 www sshd[1643]: ROOT LOGIN REFUSED FROM ::ffff:1.2.3.4
Jul 20 14:42:11 localhost sshd[22708]: Invalid user ftp from 211.114.51.213 Jul 20 14:42:11 localhost sshd[22708]: Invalid user ftp from 211.114.51.213
#5 new filter introduced after looking at 44087D8C.9090407@bluewin.ch #5 new filter introduced after looking at 44087D8C.9090407@bluewin.ch
Mar 3 00:17:22 [sshd] User root from 210.188.220.49 not allowed because not listed in AllowUsers # yoh: added ':' after [sshd] since the case without is not really common any more
Mar 3 00:17:22 [sshd]: User root from 211.188.220.49 not allowed because not listed in AllowUsers
Feb 25 14:34:11 belka sshd[31607]: User root from example.com not allowed because not listed in AllowUsers Feb 25 14:34:11 belka sshd[31607]: User root from example.com not allowed because not listed in AllowUsers
#6 ew filter introduced thanks to report Guido Bozzetto <reportbug@G-B.it> #6 ew filter introduced thanks to report Guido Bozzetto <reportbug@G-B.it>