SSHGuard / Patches / #7 1.5 does not detect ssh invalid users logins on *BSD

#7 1.5 does not detect ssh invalid users logins on *BSD

Status: accepted

Owner: Kevin Zheng

Labels: None

Priority: 5

Updated: 2015-03-01

Created: 2012-12-19

Creator: François Charlier

Private: No

Reported on the sshguard-users mailing-list [1], in OpenBSD & FreeBSD, ssh logs invalid users logins with a uppercase "I" in "Invalid", the parser restricts to lowercase "invalid".

The attached patch parses both “Invalid” and “invalid”.

Thanks !

[1] http://sourceforge.net/mailarchive/forum.php?thread_name=20120625040417.GD4130%40nntp.AegisInfoSys.com&forum_name=sshguard-users

Discussion

François Charlier - 2012-12-19

Scan “invalid” word with both lowercase & uppercase “i”

patch-src-parser-attack_scanner.l

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Kevin Zheng - 2015-02-26

status: open --> closed-fixed

assigned_to: Kevin Zheng

Group: --> Unstable (example)
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Kevin Zheng - 2015-02-26

Sorry for the very belated response. Committed in 6215100, thanks!

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Kevin Zheng - 2015-03-01

Status: closed-fixed --> accepted
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

1.5 does not detect ssh invalid users logins on *BSD

Intelligently block brute-force attacks by aggregating system logs

Searches

Help

#7 1.5 does not detect ssh invalid users logins on *BSD

Discussion