From 3cd9a4d0063c31c086cb74ec8771b17bd404e508 Mon Sep 17 00:00:00 2001
From: Russ Allbery <rra@stanford.edu>
Date: Tue, 1 Apr 2014 20:22:57 -0700
Subject: [PATCH] Ignore another version of the error for invalid users

---
 files/ssh/etc/filter-syslog/ssh-ignore-fail | 1 +
 1 file changed, 1 insertion(+)

diff --git a/files/ssh/etc/filter-syslog/ssh-ignore-fail b/files/ssh/etc/filter-syslog/ssh-ignore-fail
index 2d8e012..41ddd46 100644
--- a/files/ssh/etc/filter-syslog/ssh-ignore-fail
+++ b/files/ssh/etc/filter-syslog/ssh-ignore-fail
@@ -11,6 +11,7 @@ sshd: /^Failed keyboard-interactive/pam for .+ from [\d.:a-f]+ port \d+ ssh2$/
 sshd: /^Failed password for .+ from [\d.:a-f]+ port \d+ ssh2$/
 sshd: /^Failed \S+ for invalid user .* from [\d.:a-f]+ port \d+ ssh2$/
 sshd: /^Invalid user .* from [\d.:a-f]+$/
+sshd: /^Postponed \S+ for invalid user \S+ from [a-fA-F:\d.]+ port \d+/
 sshd: /^error: PAM: Authentication failure for (illegal user )?\S+ from \S+$/
 sshd: /^error: PAM: User not known to the underlying authentication /
 sshd: /^reverse mapping checking getaddrinfo for (\S+|\S+ \S+) failed - /
-- 
GitLab