Public bug reported: On Ubuntu Precise, logcheck rules for SSH do not seem up to date. Examples of log messages that are not filtered but it seems they should:
subsystem request for sftp by user root Received disconnect from 58.132.132.31: 11: Bye Bye [preauth] last message repeated 2 times Disconnecting: Too many authentication failures for root [preauth] input_userauth_request: invalid user foobar [preauth] ** Affects: logcheck Importance: Unknown Status: Unknown ** Affects: logcheck (Ubuntu) Importance: Undecided Status: New ** Bug watch added: Debian Bug tracker #712785 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=712785 ** Also affects: logcheck via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=712785 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1259592 Title: logcheck rules for ssh are not up to date To manage notifications about this bug go to: https://bugs.launchpad.net/logcheck/+bug/1259592/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs