ACZoom  ·  Archive-2016

Need the following two rules for FC4:

"SSHD-Invalid": re.compile(r"""sshd\[\d+\]: Invalid user (?P.*?) from (::ffff:)?(?P\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})"""),

"SSHD-AllowUser": re.compile(r"""sshd\[\d+\]: User (?P.*?) from (::ffff:)?(?P\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) not allowed because not listed in AllowUsers"""),

Note that I only permit specific accounts to log in via keys.