Date: Thu, 16 Mar 2006 15:03:08 +0200 (EET) From: Dmitry Pryanishnikov <dmitry@atlantis.dp.ua> To: freebsd-current@freebsd.org Subject: src/etc/periodic/security/800.loginfail Message-ID: <20060316145826.M96629@atlantis.atlantis.dp.ua>
index | next in thread | raw e-mail
Hello! I've noticed the recent addition in this file in order to detect "(fail|invalid|bad|illegal)" in auth.log files. I wonder would it be useful to also detect SSH.COM's server "Refusing connection" messages here. They have the following format: Mar 16 14:56:55 test3 sshd2[74522]: Refusing connection from "192.168.1.145". Too many open connections (max 2, now open 2). Sincerely, Dmitry -- Atlantis ISP, System Administrator e-mail: dmitry@atlantis.dp.ua nic-hdl: LYNX-RIPEhelp
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060316145826.M96629>