Your message dated Mon, 7 Jul 2008 15:41:36 -0400
with message-id <[EMAIL PROTECTED]>
and subject line Re: Bug#443886: /etc/logcheck/ignore.d.server/proftpd:
[proftpd] Refused user $USER for service $FOO
has caused the Debian Bug report #443886,
regarding /etc/logcheck/ignore.d.server/proftpd: [proftpd] Refused user $USER
for service $FOO
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
443886: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=443886
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: logcheck-database
Version: 1.2.61
Severity: wishlist
File: /etc/logcheck/ignore.d.server/proftpd
Two weeks ago, I got a rush of these:
Sep 8 12:37:07 goretex proftpd: PAM-listfile: Refused user news for service
proftpd
(Apparently, fail2ban managed to miss those.)
This is triggered by pam_listfile, which is used by proftpd (and other
FTP daemons) to block users listed in /etc/ftpusers.
Given how lazy I am, I simply wrote a rule for my own particular daemon:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ proftpd: PAM-listfile: Refused user
[-_.[:alnum:]]+ for service proftpd$
I'm not sure how you'd prefer to handle this case, though, as there are
various other FTP daemons that do the same thing. Copy the same rule
over and over for each package? Write an enumeration and create
ignore.d.server/libpam-modules? There may be other packages that use
pam_listfile, so should you use ".*" for the daemon and service names?
Ahh, the joy of being a mere user and not having to come up with
answers. :)
FYI, here's the list of packages that include /etc/ftpusers:
ftpd
ftpd-ssl
proftpd
pure-ftpd
pure-ftpd-ldap
pure-ftpd-mysql
pure-ftpd-postgresql
vsftpd
wu-ftpd
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.21-2-k7 (SMP w/1 CPU core)
Locale: LANG=en_CA.utf-8, LC_CTYPE=en_CA.utf-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
-- debconf information excluded
--- End Message ---
--- Begin Message ---
This was fixed by commit ed3eb5e1d8697c7c0b1447b1580c742cd8d12cad
--- End Message ---
_______________________________________________
Logcheck-devel mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
