[Logcheck-devel] Bug#445074: /etc/logcheck/ignore.d.server/ssh: Nasty PTR record

[Frédéric Brière]

Package: logcheck-database
Version: 1.2.62
Severity: wishlist
File: /etc/logcheck/ignore.d.server/ssh

openssh issues a friendly warning when the remote IP maps back to a
hostname that looks just like an IP address.  (For example, the address
206.251.174.31 currently maps back to the hostname "206.251.174.31".)

Here's a rule that filters out these unimportant messages:

  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Nasty PTR record "[:[:xdigit:].]+" is set up for [:[:xdigit:].]+, ignoring$


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.21-2-k7 (SMP w/1 CPU core)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-- debconf information excluded