Re: logcheck driving me nuts

2006-04-02 Thread Pim Bliek
Now that works! Dankjewel Florian ;) (thanks in dutch for the rest of the list ;)) Pim On Apr 2, 2006, at 7:07 PM, Florian Kulzer wrote: Pim Bliek wrote: Hi list Logcheck is driving me NUTS. I'm not a regular expression guru so here's my problem: Every hour I run a script to kick out ssh bru

Re: logcheck driving me nuts

2006-04-02 Thread Florian Kulzer
Pim Bliek wrote: Hi list Logcheck is driving me NUTS. I'm not a regular expression guru so here's my problem: Every hour I run a script to kick out ssh brute force script kiddies. This generates the following in syslog: Apr 2 17:01:01 zenggi2 /USR/SBIN/CRON[29227]: (root) CMD (ruby /root/ aut

Re: logcheck driving me nuts

2006-04-02 Thread diswill
Not an answer to your question... Can I get a copy of the script you use to block brute force attempts? thanks diswill Pim Bliek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi list Logcheck is driving me NUTS. I'm not a regular expression guru so here's my problem: Every hour I ru

Re: logcheck driving me nuts

2006-04-02 Thread Oliver Jato
Am Sonntag, den 02.04.2006, 17:35 +0200 schrieb Pim Bliek: > ^[[:alnum:]-]+autodeny[[:alnum:]-]+$ i don't know about logcheck and the regexp syntax it uses, but try ^.*autodeny\.rb.*$ you may have to start and finish the expression with a slash. Grüße / Regards, Oliver -- All things are either s

logcheck driving me nuts

2006-04-02 Thread Pim Bliek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi list Logcheck is driving me NUTS. I'm not a regular expression guru so here's my problem: Every hour I run a script to kick out ssh brute force script kiddies. This generates the following in syslog: Apr 2 17:01:01 zenggi2 /USR/SBIN/CRON[29