From 293e18e8d073f374525137501adb2a6c20153d67 Mon Sep 17 00:00:00 2001
From: Russ Allbery <rra@stanford.edu>
Date: Wed, 2 Apr 2014 19:19:52 -0700
Subject: [PATCH] Remove a duplicate ssh filter rule

---
 files/ssh/etc/filter-syslog/ssh | 1 -
 1 file changed, 1 deletion(-)

diff --git a/files/ssh/etc/filter-syslog/ssh b/files/ssh/etc/filter-syslog/ssh
index 8ef72f8..3ffc5ec 100644
--- a/files/ssh/etc/filter-syslog/ssh
+++ b/files/ssh/etc/filter-syslog/ssh
@@ -57,7 +57,6 @@ sshd: /^error: PAM: User not known to the .* from (inspect|scan1)\./
 sshd: /^refused connect from (::ffff:)?171\.67\.22\.12 /
 sshd: / authentication failure; .* rhost=(scan1|inspect(2-scan)?)\.stanford/
 sshd: /^Postponed \S+ for invalid user \S+ from (::ffff:)?171\.67\.22\.12 /
-sshd: /^Postponed \S+ for \S+ from (::ffff:)?171\.67\.22\.12 /
 
 # Ignore the logged disconnect message.  (We'll still get individual
 # authentication failures from compromised systems.)
-- 
GitLab