diff --git a/ChangeLog b/ChangeLog index a6b33b25..699d99ad 100644 --- a/ChangeLog +++ b/ChangeLog @@ -24,6 +24,8 @@ ver. 0.8.3 (2008/??/??) - stable René Berber. - Added ISO 8601 date/time format. - Added and changed some logging level and messages. +- Added missing ignoreregex to filters. Thanks to Klaus + Lehmann. ver. 0.8.2 (2008/03/06) - stable ---------- diff --git a/config/filter.d/gssftpd.conf b/config/filter.d/gssftpd.conf index af1c39c2..8c166309 100644 --- a/config/filter.d/gssftpd.conf +++ b/config/filter.d/gssftpd.conf @@ -12,3 +12,9 @@ # Values: TEXT # failregex = ftpd(?:\[\d+\])?:\s+repeated login failures from \(\S+\)$ + +# Option: ignoreregex +# Notes.: regex to ignore. If this regex matches, the line is ignored. +# Values: TEXT +# +ignoreregex = diff --git a/config/filter.d/named-refused.conf b/config/filter.d/named-refused.conf index 74014644..c2c06a8f 100644 --- a/config/filter.d/named-refused.conf +++ b/config/filter.d/named-refused.conf @@ -28,4 +28,8 @@ __line_prefix=(?:\s\S+ %(__daemon_combs_re)s\s+)? # failregex = %(__line_prefix)sclient #\S+: query(?: \(cache\))? '.*' denied\s*$ - +# Option: ignoreregex +# Notes.: regex to ignore. If this regex matches, the line is ignored. +# Values: TEXT +# +ignoreregex = diff --git a/config/filter.d/pam-generic.conf b/config/filter.d/pam-generic.conf index 55e9efd0..7e48a08d 100644 --- a/config/filter.d/pam-generic.conf +++ b/config/filter.d/pam-generic.conf @@ -23,3 +23,9 @@ __pam_combs_re=(?:%(__pid_re)s?:\s+%(__pam_re)s|%(__pam_re)s%(__pid_re)s?:) # Values: TEXT # failregex = \s\S+ \S+%(__pam_combs_re)s\s+authentication failure; logname=\S* uid=\S* euid=\S* tty=%(_ttys_re)s ruser=\S* rhost=(?:\s+user=.*)?\s*$ + +# Option: ignoreregex +# Notes.: regex to ignore. If this regex matches, the line is ignored. +# Values: TEXT +# +ignoreregex = diff --git a/config/filter.d/wuftpd.conf b/config/filter.d/wuftpd.conf index 2d08022d..56ba499f 100644 --- a/config/filter.d/wuftpd.conf +++ b/config/filter.d/wuftpd.conf @@ -12,3 +12,9 @@ # Values: TEXT # failregex = wu-ftpd(?:\[\d+\])?:\s+\(pam_unix\)\s+authentication failure.* rhost=$ + +# Option: ignoreregex +# Notes.: regex to ignore. If this regex matches, the line is ignored. +# Values: TEXT +# +ignoreregex =