** Description changed: On Ubuntu Precise, logcheck rules for SSH do not seem up to date. Examples of log messages that are not filtered but it seems they should: subsystem request for sftp by user root Received disconnect from 58.132.132.31: 11: Bye Bye [preauth] Received disconnect from 82.221.102.182: 11: PECL/ssh2 (http://pecl.php.net/packages/ssh2) [preauth] last message repeated 2 times Disconnecting: Too many authentication failures for root [preauth] input_userauth_request: invalid user foobar [preauth] + fatal: Read from socket failed: Connection reset by peer [preauth]
-- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to logcheck in Ubuntu. https://bugs.launchpad.net/bugs/1259592 Title: logcheck rules for ssh are not up to date To manage notifications about this bug go to: https://bugs.launchpad.net/logcheck/+bug/1259592/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs