search

robzr / bearDropper

Busybox ash based log examination script w/ iptables firewall rule generation response (fail2ban for OpenWRT)
90 stars 34 forks source link

Adapt regex for case when root login is not allowed #7

Open br101 opened 7 years ago

br101 commented 7 years ago

Adapt regex of "Exit before auth" for the case when dropbear is configured to not allow root logins (RootLogin 'off'). The log entry in this case looks like this:

Exit before auth (user 'root', 0 fails): Exited normally