2013-10-30 13:02:59 +00:00
|
|
|
# Fail2Ban filter to match wrong passwords as notified by lighttpd's auth Module
|
2011-12-24 20:51:18 +00:00
|
|
|
#
|
|
|
|
|
|
|
|
|
|
[Definition]
|
|
|
|
|
|
2021-10-01 13:03:24 +00:00
|
|
|
failregex = ^\s*(?:: )?\(?(?:http|mod)_auth\.c\.\d+\) (?:password doesn\'t match for (?:\S+|.*?) username:\s+<F-USER>(?:\S+|.*?)</F-USER>\s*|digest: auth failed(?: for\s+<F-ALT_USER>(?:\S+|.*?)</F-ALT_USER>\s*)?: (?:wrong password|uri mismatch \([^\)]*\))|get_password failed),? IP: <HOST>\s*$
|
2011-12-24 20:51:18 +00:00
|
|
|
|
|
|
|
|
ignoreregex =
|
2013-10-30 13:02:59 +00:00
|
|
|
|
|
|
|
|
# Author: Francois Boulogne <fboulogne@april.org>
|
