fail2ban/config/filter.d/xinetd-fail.conf

# Fail2Ban filter for xinetd failures
#
# Cfr.: /var/log/(daemon\.|sys)log
#
#

[INCLUDES]

# Read common prefixes. If any customizations available -- read them from
# common.local
before = common.conf

[Definition]

_daemon = xinetd

failregex = ^%(__prefix_line)sFAIL: \S+ address from=<HOST>$
            ^%(__prefix_line)sFAIL: \S+ libwrap from=<HOST>$

ignoreregex = 

# DEV Notes:
#
# libwrap => tcp wrappers: hosts.(allow|deny)
# address => xinetd: deny_from|only_from
#
# Author: Guido Bozzetto
DOC: in filters, put user relevant doc at top, and developer info at bottom, and remove all the repetative blindly copied stuff that appears in the jail man page 11 years ago			`# Fail2Ban filter for xinetd failures`
- Fixed Debian bug #461426 git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@667 a942ae1a-1317-0410-a47c-b1dcaea8d605 17 years ago			`#`
DOC: in filters, put user relevant doc at top, and developer info at bottom, and remove all the repetative blindly copied stuff that appears in the jail man page 11 years ago			`# Cfr.: /var/log/(daemon\.\|sys)log`
- Fixed Debian bug #461426 git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@667 a942ae1a-1317-0410-a47c-b1dcaea8d605 17 years ago			`#`
			`#`

ENH: Improve xinetd-fail regex and add sample logs 12 years ago			`[INCLUDES]`

			`# Read common prefixes. If any customizations available -- read them from`
			`# common.local`
			`before = common.conf`

- Fixed Debian bug #461426 git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@667 a942ae1a-1317-0410-a47c-b1dcaea8d605 17 years ago			`[Definition]`

ENH: Improve xinetd-fail regex and add sample logs 12 years ago			`_daemon = xinetd`

			`failregex = ^%(__prefix_line)sFAIL: \S+ address from=<HOST>$`
			`^%(__prefix_line)sFAIL: \S+ libwrap from=<HOST>$`
- Fixed Debian bug #461426 git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@667 a942ae1a-1317-0410-a47c-b1dcaea8d605 17 years ago
			`ignoreregex =`
DOC: in filters, put user relevant doc at top, and developer info at bottom, and remove all the repetative blindly copied stuff that appears in the jail man page 11 years ago
			`# DEV Notes:`
			`#`
			`# libwrap => tcp wrappers: hosts.(allow\|deny)`
			`# address => xinetd: deny_from\|only_from`
			`#`
			`# Author: Guido Bozzetto`