Re: [SSHGuard-users] Fix For Catching Postfix "submission" Log Entry Parsing?

[Kevin Z. <kev...@gm...>]

Hi Jim,

On 09/13/2016 09:50, Jim Seymour wrote:
> My lex/yacc fu is no longer very good, but I do know my way around
> REs. I believe this can be fixed in sshguard by changing each
> occurence of the following, in src/parser/attack_scanner.l, from
> 
>     {PROCESSNAME}("/"{PROCESSNAME})?
> 
> to either
> 
>     {PROCESSNAME}("/"{PROCESSNAME})*
> 
> or, probably better,
> 
>     {PROCESSNAME}("/"{PROCESSNAME}){0,2}

I believe your suggested fix is correct. I'll fix it soon-ish hopefully
and make sure everything else is still working.

Best,
Kevin

-- 
Kevin Zheng
kev...@gm... | ke...@be... | PGP: 0xC22E1090