[Logcheck-commits] r1669 - in logcheck/branches/macros: debian rulefiles/linux/violations.ignore.d

madduck at users.alioth.debian.org madduck at users.alioth.debian.org
Thu Aug 23 07:58:33 UTC 2007


Author: madduck
Date: 2007-08-23 07:58:33 +0000 (Thu, 23 Aug 2007)
New Revision: 1669

Modified:
   logcheck/branches/macros/debian/changelog
   logcheck/branches/macros/rulefiles/linux/violations.ignore.d/logcheck-proftpd
Log:
* violations.ignore.d/logcheck-proftpd:
  - deal with IPv6 addresses (closes: #437753).


Modified: logcheck/branches/macros/debian/changelog
===================================================================
--- logcheck/branches/macros/debian/changelog	2007-08-23 07:58:31 UTC (rev 1668)
+++ logcheck/branches/macros/debian/changelog	2007-08-23 07:58:33 UTC (rev 1669)
@@ -60,8 +60,11 @@
   * ignore.d.server/bind, violations.ignore.d/logcheck-bind:
     - also ignore unresolved RCODE 15 in warning messages (closes: #437891).
 
- -- martin f. krafft <madduck at debian.org>  Thu, 23 Aug 2007 09:54:54 +0200
+  * violations.ignore.d/logcheck-proftpd:
+    - deal with IPv6 addresses (closes: #437753).
 
+ -- martin f. krafft <madduck at debian.org>  Thu, 23 Aug 2007 09:56:28 +0200
+
 logcheck (1.2.58) unstable; urgency=low
 
   * ignore.d.server/procmail: ignore write errors from procmail.

Modified: logcheck/branches/macros/rulefiles/linux/violations.ignore.d/logcheck-proftpd
===================================================================
--- logcheck/branches/macros/rulefiles/linux/violations.ignore.d/logcheck-proftpd	2007-08-23 07:58:31 UTC (rev 1668)
+++ logcheck/branches/macros/rulefiles/linux/violations.ignore.d/logcheck-proftpd	2007-08-23 07:58:33 UTC (rev 1669)
@@ -1,4 +1,4 @@
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ proftpd: \(pam_unix\) authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=[-_.[:alnum:]]+  user=[-_.[:alnum:]]+$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ proftpd: \(pam_unix\) authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=[-_.:[:alnum:]]+  user=[-_.[:alnum:]]+$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ proftpd\[[[:digit:]]{1,5}\]: [._[:alnum:]-]+ \([._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - PAM\([-_.[:alnum:]]+\): Authentication failure\.$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ proftpd\[[[:digit:]]{1,5}\]: [._[:alnum:]-]+ \([._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - Connection from [._[:alnum:]-]+ \[[.:[:xdigit:]]+\] denied\.$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ proftpd\[[[:digit:]]{1,5}\]: [._[:alnum:]-]+ \([._[:alnum:]-]+\[[.:[:xdigit:]]+\]\) - USER [-._[:alnum:]]+ \(Login failed\): Limit access denies login$




More information about the Logcheck-commits mailing list