2013-10-30 13:02:59 +00:00
|
|
|
# Fail2Ban filter for perdition
|
2013-07-19 10:14:53 +00:00
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
[INCLUDES]
|
|
|
|
|
|
|
|
|
|
before = common.conf
|
|
|
|
|
|
|
|
|
|
[Definition]
|
|
|
|
|
|
2013-07-24 00:27:12 +00:00
|
|
|
_daemon=perdition.\S+
|
2013-07-19 10:14:53 +00:00
|
|
|
|
2013-07-24 00:44:52 +00:00
|
|
|
failregex = ^%(__prefix_line)sAuth: <HOST>:\d+->(\d{1,3}\.){3}\d{1,3}:\d+ client-secure=\S+ authorisation_id=NONE authentication_id=".+" server="\S+" protocol=\S+ server-secure=\S+ status="failed: (local authentication failure|Re-Authentication Failure)"$
|
2013-07-19 10:14:53 +00:00
|
|
|
^%(__prefix_line)sFatal Error reading authentication information from client <HOST>:\d+->(\d{1,3}\.){3}\d{1,3}:\d+: Exiting child$
|
2013-10-30 13:02:59 +00:00
|
|
|
|
|
|
|
|
ignoreregex =
|
|
|
|
|
|
|
|
|
|
# Author: Christophe Carles and Daniel Black
|
