[Bug 1259592] Re: logcheck rules for ssh are not up to date

Santiago M. Mola cooldwind at gmail.com
Wed Dec 11 07:03:06 UTC 2013


** Description changed:

  On Ubuntu Precise, logcheck rules for SSH do not seem up to date.
  Examples of log messages that are not filtered but it seems they should:
  
  subsystem request for sftp by user root
  Received disconnect from 58.132.132.31: 11: Bye Bye [preauth]
+ Received disconnect from 82.221.102.182: 11: PECL/ssh2 (http://pecl.php.net/packages/ssh2) [preauth]
  last message repeated 2 times
  Disconnecting: Too many authentication failures for root [preauth]
  input_userauth_request: invalid user foobar [preauth]

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to logcheck in Ubuntu.
https://bugs.launchpad.net/bugs/1259592

Title:
  logcheck rules for ssh are not up to date

To manage notifications about this bug go to:
https://bugs.launchpad.net/logcheck/+bug/1259592/+subscriptions



More information about the Ubuntu-server-bugs mailing list