[Logcheck-commits] r1388 - in logcheck/trunk: debian
rulefiles/linux/ignore.d.server
madduck at users.alioth.debian.org
madduck at users.alioth.debian.org
Thu Dec 28 11:25:29 CET 2006
Author: madduck
Date: 2006-12-28 11:25:28 +0100 (Thu, 28 Dec 2006)
New Revision: 1388
Modified:
logcheck/trunk/debian/changelog
logcheck/trunk/rulefiles/linux/ignore.d.server/proftpd
Log:
* ignore.d.server/proftpd: ignore reaching of max login attempts limit).
Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog 2006-12-28 10:24:01 UTC (rev 1387)
+++ logcheck/trunk/debian/changelog 2006-12-28 10:25:28 UTC (rev 1388)
@@ -9,6 +9,7 @@
* ignore.d.server/proftpd: small correction wrt IPv6 addresses (closes:
#397466).
+ * ignore.d.server/proftpd: ignore reaching of max login attempts limit).
* ignore.d.server/watchdog: first couple of filters added.
@@ -18,7 +19,7 @@
(closes: #402204).
* Do not source debconf confmodule in preinst as it's not needed.
- -- martin f. krafft <madduck at debian.org> Thu, 28 Dec 2006 11:23:35 +0100
+ -- martin f. krafft <madduck at debian.org> Thu, 28 Dec 2006 11:25:08 +0100
logcheck (1.2.51) unstable; urgency=medium
Modified: logcheck/trunk/rulefiles/linux/ignore.d.server/proftpd
===================================================================
--- logcheck/trunk/rulefiles/linux/ignore.d.server/proftpd 2006-12-28 10:24:01 UTC (rev 1387)
+++ logcheck/trunk/rulefiles/linux/ignore.d.server/proftpd 2006-12-28 10:25:28 UTC (rev 1388)
@@ -7,6 +7,7 @@
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ \([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - mod_delay/[0-9.]+: delaying for [0-9]+ usecs$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ \([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - FTP no transfer timeout, disconnected$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ \([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - USER [-_.[:alnum:]]+: no such user found from [.:_[:alnum:]-]+ \[[.:[:xdigit:]]+\] to [.:[:xdigit:]]+:[[:digit:]]{2,5}$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ \([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - Maximum login attempts \([[:digit:]]+\) exceeded$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ \([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - no such user '[-_.[:alnum:]]+'$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ \([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - notice: user ftp: aborting transfer: Data connection closed\.
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ (\([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) )?- error setting IPV6_V6ONLY: Protocol not available$
More information about the Logcheck-commits
mailing list