fail2ban/config/filter.d/pure-ftpd.conf

# Fail2Ban filter for pureftp
#
# Disable hostname based logging by:
#
# Start pure-ftpd with the -H switch or on Ubuntu 'echo yes > /etc/pure-ftpd/conf/DontResolve'
#
#

[INCLUDES]

before = common.conf

[Definition]

# Error message specified in multiple languages
__errmsg = (?:Authentication failed for user|Erreur d'authentification pour l'utilisateur)

failregex = ^%(__prefix_line)s\(.+?@<HOST>\) \[WARNING\] %(__errmsg)s \[.+\]\s*$

ignoreregex = 

# Author: Cyril Jaquier
# Modified: Yaroslav Halchenko for pure-ftpd
# Documentation thanks to Blake on http://www.fail2ban.org/wiki/index.php?title=Fail2ban:Community_Portal
DOC: in filters, put user relevant doc at top, and developer info at bottom, and remove all the repetative blindly copied stuff that appears in the jail man page 11 years ago			`# Fail2Ban filter for pureftp`
- Added pure-ftpd filter. Thanks to Yaroslav Halchenko git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@560 a942ae1a-1317-0410-a47c-b1dcaea8d605 18 years ago			`#`
DOC: filter.d./pure-ftpd doco from wiki 11 years ago			`# Disable hostname based logging by:`
- Added pure-ftpd filter. Thanks to Yaroslav Halchenko git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@560 a942ae1a-1317-0410-a47c-b1dcaea8d605 18 years ago			`#`
DOC: filter.d./pure-ftpd doco from wiki 11 years ago			`# Start pure-ftpd with the -H switch or on Ubuntu 'echo yes > /etc/pure-ftpd/conf/DontResolve'`
- Added pure-ftpd filter. Thanks to Yaroslav Halchenko git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@560 a942ae1a-1317-0410-a47c-b1dcaea8d605 18 years ago			`#`
DOC: filter.d./pure-ftpd doco from wiki 11 years ago			`#`

TST: pureftpd - syslog therefore use syslog prefixes in filter 11 years ago			`[INCLUDES]`

			`before = common.conf`
- Added pure-ftpd filter. Thanks to Yaroslav Halchenko git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@560 a942ae1a-1317-0410-a47c-b1dcaea8d605 18 years ago
			`[Definition]`

			`# Error message specified in multiple languages`
			`__errmsg = (?:Authentication failed for user\|Erreur d'authentification pour l'utilisateur)`

TST: pureftpd - syslog therefore use syslog prefixes in filter 11 years ago			`failregex = ^%(__prefix_line)s\(.+?@<HOST>\) \[WARNING\] %(__errmsg)s \[.+\]\s*$`
- Added pure-ftpd filter. Thanks to Yaroslav Halchenko git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@560 a942ae1a-1317-0410-a47c-b1dcaea8d605 18 years ago
			`ignoreregex =`

DOC: in filters, put user relevant doc at top, and developer info at bottom, and remove all the repetative blindly copied stuff that appears in the jail man page 11 years ago			`# Author: Cyril Jaquier`
			`# Modified: Yaroslav Halchenko for pure-ftpd`
DOC: filter.d./pure-ftpd doco from wiki 11 years ago			`# Documentation thanks to Blake on http://www.fail2ban.org/wiki/index.php?title=Fail2ban:Community_Portal`