Actions
Bug #16312
closed
JP
JP
``sshguard`` does not trigger for GUI logins from usernames containing unexpected characters
Bug #16312:
``sshguard`` does not trigger for GUI logins from usernames containing unexpected characters
Status:
Resolved
Priority:
High
Assignee:
Category:
User Manager / Privileges
Target version:
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
25.11
Release Notes:
Default
Affected Version:
Affected Architecture:
Description
We currently patch the sshguard port to match pfSense login messages like so:
.+": webConfigurator authentication error for user '"{WORD}"' from: " { return PFSENSE_AUTH_FAIL; }
However, sshguard defines WORD as:
WORD [a-zA-Z0-9][-_a-zA-Z0-9]+
As a consequence, if the username contains a character not in that list, such as a period (.) in a valid username like first.last, then sshguard would not trigger for a login failure message involving that account.
The login message format should be changed to use a different pattern such as .+, .*, or [^ ]
Files
Actions