[syslog-ng] pure-ftpd

[Peter Czanik]

Hello,

On 09/29/2010 01:26 PM, Balazs Scheidler wrote:
>
>> - how should Anonymous login be handled?
>> @QSTRING:useracct.username: @
>> vs.
>> <value name="usracct.username">Anonymous</value>
>>     
> anonymous should be handled just like any other username, although it is
> canonically written as "anonymous" e.g. lower case.
>
>   
Anonymous is logged differently, so it can't be handled with the same rule:

"Anonymous user logged in" vs. "czanik is now logged in"

Considering that the lower case name is preferred, I'd say, that we
should use the second way, but use a lowercase "anonymous":
<value name="usracct.username">anonymous</value>
Bye,

-- 
Peter Czanik (CzP) <czanik at balabit.hu>
BalaBit IT Security / syslog-ng upstream
http://czanik.blogs.balabit.com/