[Bug 1259592] [NEW] logcheck rules for ssh are not up to date

Santiago M. Mola cooldwind at gmail.com
Tue Dec 10 15:12:37 UTC 2013


Public bug reported:

On Ubuntu Precise, logcheck rules for SSH do not seem up to date.
Examples of log messages that are not filtered but it seems they should:

subsystem request for sftp by user root
Received disconnect from 58.132.132.31: 11: Bye Bye [preauth]
last message repeated 2 times
Disconnecting: Too many authentication failures for root [preauth]
input_userauth_request: invalid user foobar [preauth]

** Affects: logcheck
     Importance: Unknown
         Status: Unknown

** Affects: logcheck (Ubuntu)
     Importance: Undecided
         Status: New

** Bug watch added: Debian Bug tracker #712785
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=712785

** Also affects: logcheck via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=712785
   Importance: Unknown
       Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to logcheck in Ubuntu.
https://bugs.launchpad.net/bugs/1259592

Title:
  logcheck rules for ssh are not up to date

To manage notifications about this bug go to:
https://bugs.launchpad.net/logcheck/+bug/1259592/+subscriptions



More information about the Ubuntu-server-bugs mailing list