Re: [SSHGuard-users] Fix For Catching Postfix "submission" Log Entry Parsing?

[Jim S. <jse...@Li...>]

On Mon, 19 Sep 2016 10:26:03 -0700
Kevin Zheng <kev...@gm...> wrote:

> On 09/13/2016 09:50, Jim Seymour wrote:
> > My lex/yacc fu is no longer very good, but I do know my way around
> > REs. I believe this can be fixed in sshguard by changing each
> > occurence of the following, in src/parser/attack_scanner.l, from
> > 
> >     {PROCESSNAME}("/"{PROCESSNAME})?
> > 
> > to either
> > 
> >     {PROCESSNAME}("/"{PROCESSNAME})*
> > 
> > or, probably better,
> > 
> >     {PROCESSNAME}("/"{PROCESSNAME}){0,2}  
> 
> Committed in 98ddee7, thanks!
> 

You're welcome, and thank *you* for the utility :)

Regards,
Jim
-- 
Note: My mail server employs *very* aggressive anti-spam
filtering.  If you reply to this email and your email is
rejected, please accept my apologies and let me know via my
web form at <http://jimsun.LinxNet.com/contact/scform.php>.