--- fail2ban-0.8.0/config/filter.d/sshd.conf.upstream	2007-06-20 11:56:18.000000000 +0100

+++ fail2ban-0.8.0/config/filter.d/sshd.conf	2007-06-20 11:53:36.000000000 +0100

@@ -14,10 +14,11 @@

 #          (?:::f{4,6}:)?(?P<host>\S+)

 # Values:  TEXT

 #

-failregex = Authentication failure for .* from <HOST>

-            Failed [-/\w]+ for .* from <HOST>

-            ROOT LOGIN REFUSED .* FROM <HOST>

-            [iI](?:llegal|nvalid) user .* from <HOST>

+failregex = Authentication failure for .* from <HOST>$

+            Failed [-/\w]+ for .* from <HOST>$

+            ROOT LOGIN REFUSED .* FROM <HOST>$

+            [iI](?:llegal|nvalid) user .* from <HOST>$

+            User .* from <HOST> not allowed because not listed in AllowUsers$

 # Option:  ignoreregex

 # Notes.:  regex to ignore. If this regex matches, the line is ignored.