Public bug reported:
On Ubuntu Precise, logcheck rules for SSH do not seem up to date.
Examples of log messages that are not filtered but it seems they should:
subsystem request for sftp by user root
Received disconnect from 58.132.132.31: 11: Bye Bye [preauth]
last message repeated 2 times
Disconnecting: Too many authentication failures for root [preauth]
input_userauth_request: invalid user foobar [preauth]
** Affects: logcheck
Importance: Unknown
Status: Unknown
** Affects: logcheck (Ubuntu)
Importance: Undecided
Status: New
** Bug watch added: Debian Bug tracker #712785
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=712785
** Also affects: logcheck via
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=712785
Importance: Unknown
Status: Unknown
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to logcheck in Ubuntu.
https://bugs.launchpad.net/bugs/1259592
Title:
logcheck rules for ssh are not up to date
To manage notifications about this bug go to:
https://bugs.launchpad.net/logcheck/+bug/1259592/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
