X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?a=blobdiff_plain;f=etc%2Frules%2Fsshd_rules.xml;h=06d7dc9c3bbf0b82baba8e18f3f0916a1b9e19e1;hb=HEAD;hp=6f21d98ba1d4242f068d4a6bac45db1d1771065f;hpb=6ef2f786c6c8ead94841b5f93baf9f43421f08c8;p=ossec-hids.git
diff --git a/etc/rules/sshd_rules.xml b/etc/rules/sshd_rules.xml
old mode 100755
new mode 100644
index 6f21d98..06d7dc9
--- a/etc/rules/sshd_rules.xml
+++ b/etc/rules/sshd_rules.xml
@@ -270,6 +270,136 @@
authentication_failed,
+
+ 5700
+ ^error: Could not stat AuthorizedKeysCommand
+ SSHD configuration error (AuthorizedKeysCommand)
+
+
+
+ 5700
+ Connection reset by peer$
+ ssh connection reset by peer
+
+
+
+ 5700
+ Connection refused$
+ ssh connection refused
+
+
+
+ 5700
+ Connection timed out$
+ ssh connection timed out
+
+
+
+ 5700
+ No route to host$
+ ssh no route to host
+
+
+
+ 5700
+ failure direct-tcpip$
+ ssh port forwarding issue
+
+
+
+ 5700
+ Transport endpoint is not connected$
+ ssh transport endpoint is not connected
+
+
+
+ 5700
+ get_remote_port failed$
+ ssh get_remote_port failed
+
+
+
+
+ 5700
+ bad client public DH value
+ ssh bad client public DH value
+
+
+
+
+ 5700
+ Corrupted MAC on input.
+ ssh corrupted MAC on input
+
+
+
+ 5700
+ ^Bad packet length
+ ssh bad packet length
+
+
+
+ sshd
+ 5700
+ Unable to negotiate with |Unable to negotiate a key
+ sshd could not negotiate with client.
+
+
+
+ sshd
+ 5700
+ no hostkey alg [preauth]
+ No hostkey alg.
+
+
+
+ 5750
+ no matching key exchange method found.|Unable to negotiate a key exchange method
+ Client did not offer an acceptable key exchange method.
+
+
+
+ 5750
+ no matching cipher found.
+ sshd could not negotiate with client, no matching cipher.
+
+
+
+ 5700
+ Failed to create session:
+ sshd failed to create a session.
+
+
+
+ 5700
+ bad ownership or modes for file
+ Authentication refused due to owner/permissions of authorized_keys.
+ authentication_failed,
+
+
+
+ 5700
+ failed, subsystem not found$
+ sshd subsystem request failed.
+
+
+
+ sshd
+ but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!$
+ Bad DNS mapping.
+
+
+
+ sshd
+ ^error: maximum authentication attempts exceeded
+ Maximum authentication attempts exceeded.
+ authentication_failed,
+
+