BF: proftpd filter -- if login failed -- count regardless of the reason for failure

debian-releases/squeeze
Yaroslav Halchenko 2009-09-10 12:04:42 -04:00
parent 7721695f44
commit 5ed0f7f90a
1 changed files with 1 additions and 1 deletions

View File

@ -15,7 +15,7 @@
# Values: TEXT
#
failregex = \(\S+\[<HOST>\]\)[: -]+ USER \S+: no such user found from \S+ \[\S+\] to \S+:\S+ *$
\(\S+\[<HOST>\]\)[: -]+ USER \S+ \(Login failed\): Incorrect password\. *$
\(\S+\[<HOST>\]\)[: -]+ USER \S+ \(Login failed\): .*$
\(\S+\[<HOST>\]\)[: -]+ SECURITY VIOLATION: \S+ login attempted\. *$
\(\S+\[<HOST>\]\)[: -]+ Maximum login attempts \(\d+\) exceeded *$