Re: [Prelude Hybrid IDS] #232: ssh.rules does not handle IPv6 address
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#232: ssh.rules does not handle IPv6 address ---------------------------------+------------------------------------------ Reporter: [email protected] | Owner: yoann Type: defect | Status: assigned Priority: normal | Milestone: Prelude-LML 0.9.11 Component: prelude-lml | Version: 0.9 Severity: normal | Resolution: Keywords: | ---------------------------------+------------------------------------------ Changes (by yoann): * status: new => assigned * summary: sshrules update => ssh.rules does not handle IPv6 address Comment: ''::ffff:192.168.0.22'' is a valid IPv6 mapped IPv4 address. The regular expression should be updated to match IPv6 address by changing it from '''([\d\.]+)''' to something like '''([a-zA-Z\d\.:]+)'''. -- Ticket URL: <https://trac.prelude-ids.org/ticket/232#comment:2> Prelude Hybrid IDS <http://www.prelude-ids.org> The Prelude Hybrid Intrusion Detection System suite _______________________________________________ Prelude-devel site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-devel