[Logcheck-commits] r1388 - in logcheck/trunk: debian rulefiles/linux/ignore.d.server

madduck at users.alioth.debian.org madduck at users.alioth.debian.org
Thu Dec 28 11:25:29 CET 2006


Author: madduck
Date: 2006-12-28 11:25:28 +0100 (Thu, 28 Dec 2006)
New Revision: 1388

Modified:
   logcheck/trunk/debian/changelog
   logcheck/trunk/rulefiles/linux/ignore.d.server/proftpd
Log:
* ignore.d.server/proftpd: ignore reaching of max login attempts limit).

Modified: logcheck/trunk/debian/changelog
===================================================================
--- logcheck/trunk/debian/changelog	2006-12-28 10:24:01 UTC (rev 1387)
+++ logcheck/trunk/debian/changelog	2006-12-28 10:25:28 UTC (rev 1388)
@@ -9,6 +9,7 @@
 
   * ignore.d.server/proftpd: small correction wrt IPv6 addresses (closes:
     #397466).
+  * ignore.d.server/proftpd: ignore reaching of max login attempts limit).
 
   * ignore.d.server/watchdog: first couple of filters added.
 
@@ -18,7 +19,7 @@
     (closes: #402204).
   * Do not source debconf confmodule in preinst as it's not needed.
 
- -- martin f. krafft <madduck at debian.org>  Thu, 28 Dec 2006 11:23:35 +0100
+ -- martin f. krafft <madduck at debian.org>  Thu, 28 Dec 2006 11:25:08 +0100
 
 logcheck (1.2.51) unstable; urgency=medium
 

Modified: logcheck/trunk/rulefiles/linux/ignore.d.server/proftpd
===================================================================
--- logcheck/trunk/rulefiles/linux/ignore.d.server/proftpd	2006-12-28 10:24:01 UTC (rev 1387)
+++ logcheck/trunk/rulefiles/linux/ignore.d.server/proftpd	2006-12-28 10:25:28 UTC (rev 1388)
@@ -7,6 +7,7 @@
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ \([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - mod_delay/[0-9.]+: delaying for [0-9]+ usecs$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ \([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - FTP no transfer timeout, disconnected$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ \([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - USER [-_.[:alnum:]]+: no such user found from [.:_[:alnum:]-]+ \[[.:[:xdigit:]]+\] to [.:[:xdigit:]]+:[[:digit:]]{2,5}$
+^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ \([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - Maximum login attempts \([[:digit:]]+\) exceeded$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ \([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - no such user '[-_.[:alnum:]]+'$
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ \([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - notice: user ftp: aborting transfer: Data connection closed\.
 ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd\[[0-9]+\]: [._[:alnum:]-]+ (\([:._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) )?- error setting IPV6_V6ONLY: Protocol not available$




More information about the Logcheck-commits mailing list