- Fix regex to match all sshd auth errors

PR:		194382
Submitted by:	ronald-lists@klop.ws
MFH:		2014Q4
This commit is contained in:
Dmitry Marakasov 2014-10-15 20:28:48 +00:00
parent 3e2b7a507f
commit 4b8ea145f1
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=370951
2 changed files with 2 additions and 2 deletions

View file

@ -3,7 +3,7 @@
PORTNAME= bruteblock PORTNAME= bruteblock
PORTVERSION= 0.0.5 PORTVERSION= 0.0.5
PORTREVISION= 5 PORTREVISION= 6
CATEGORIES= security CATEGORIES= security
MASTER_SITES= http://samm.kiev.ua/bruteblock/ \ MASTER_SITES= http://samm.kiev.ua/bruteblock/ \
http://mirror.amdmi3.ru/distfiles/ http://mirror.amdmi3.ru/distfiles/

View file

@ -15,7 +15,7 @@
+# +#
+regexp = sshd.*(?:Illegal|Invalid) user \S+ from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) +regexp = sshd.*(?:Illegal|Invalid) user \S+ from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
+regexp1 = sshd.*Failed \S+ for (?:(?:illegal|invalid) user )?\S+ from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) +regexp1 = sshd.*Failed \S+ for (?:(?:illegal|invalid) user )?\S+ from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
+regexp2 = sshd.*error: PAM: authentication error for (?:(?:illegal|invalid) user )\S+ from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) +regexp2 = sshd.*error: PAM: authentication error for (?:(?:illegal|invalid) user )?\S+ from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
+regexp3 = sshd.*Did not receive identification string from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) +regexp3 = sshd.*Did not receive identification string from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
# Number of failed login attempts within time before we block # Number of failed login attempts within time before we block