fail2ban/config/filter.d/wuftpd.conf

# Fail2Ban configuration file for wuftpd
#
#

[INCLUDES]

# Read common prefixes. If any customizations available -- read them from
# common.local
before = common.conf

[Definition]

_daemon = wu-ftpd
__pam_re=\(?%(__pam_auth)s(?:\(wu-ftpd:auth\))?\)?:?

failregex = ^%(__prefix_line)sfailed login from \S+ \[<HOST>\]\s*$
            ^%(__prefix_line)s%(__pam_re)s\s+authentication failure; logname=\S* uid=\S* euid=\S* tty=(ftp)? ruser=\S* rhost=<HOST>(?:\s+user=.*)?\s*$


ignoreregex = 

# Author: Yaroslav Halchenko
- Added new filters/actions. Thanks to Yaroslav Halchenko git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@520 a942ae1a-1317-0410-a47c-b1dcaea8d605 18 years ago			`# Fail2Ban configuration file for wuftpd`
			`#`
			`#`

ENH: Improve wuftpd failregex, drop duplicate pam regex and add sample For wu-ftpd configured to use pam, the pam filter used be used, as regex is more robust. 12 years ago			`[INCLUDES]`

			`# Read common prefixes. If any customizations available -- read them from`
			`# common.local`
			`before = common.conf`

- Added new filters/actions. Thanks to Yaroslav Halchenko git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@520 a942ae1a-1317-0410-a47c-b1dcaea8d605 18 years ago			`[Definition]`

ENH: Improve wuftpd failregex, drop duplicate pam regex and add sample For wu-ftpd configured to use pam, the pam filter used be used, as regex is more robust. 12 years ago			`_daemon = wu-ftpd`
Add filter variable __pam_auth to allow easier changing of pam auth backend 10 years ago			`__pam_re=\(?%(__pam_auth)s(?:\(wu-ftpd:auth\))?\)?:?`
ENH: Improve wuftpd failregex, drop duplicate pam regex and add sample For wu-ftpd configured to use pam, the pam filter used be used, as regex is more robust. 12 years ago
ENH: trailing space as per discussion on gh-303 11 years ago			`failregex = ^%(__prefix_line)sfailed login from \S+ \[<HOST>\]\s*$`
BF: fix to filter.d/wuftp to support pam authentication - Debian bug #665925 11 years ago			`^%(__prefix_line)s%(__pam_re)s\s+authentication failure; logname=\S* uid=\S* euid=\S* tty=(ftp)? ruser=\S* rhost=<HOST>(?:\s+user=.)?\s$`

- Added missing ignoreregex to filters. Thanks to Klaus Lehmann. git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@699 a942ae1a-1317-0410-a47c-b1dcaea8d605 17 years ago
			`ignoreregex =`
DOC: in filters, put user relevant doc at top, and developer info at bottom, and remove all the repetative blindly copied stuff that appears in the jail man page 11 years ago
			`# Author: Yaroslav Halchenko`