github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

Merge 2997843278 into 86b9adb2f5

dankmaster 2025-06-17 15:22:14 -04:00 committed by GitHub
parent 86b9adb2f5 2997843278
commit 0c3d6f9947
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 6 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
config/filter.d/murmur.conf
View File

@ -15,17 +15,14 @@ _usernameregex = [^>]+
__prefix_journal = (?:\S+\s+%(_daemon)s\[\d+\]:(?:\s+\<W\>[\d\-]+ [\d:]+.\d+)?)
__prefix_line = %(__prefix_journal)s?
maxlines = 2
_prefix = %(__prefix_line)s\s+\d+ => <\d+:%(_usernameregex)s\(-1\)> Rejected connection from <HOST>:\d+:
failregex = ^\s*\d+ => <.*> Rejected connection from <HOST>:\d+: Invalid server password$
^\s*\d+ => <.*> Rejected connection from <HOST>:\d+: Wrong certificate or password for existing user$
^\s*\d+ => <.*> New connection: <HOST>:\d+\s+^\s*\d+ => <.*> Connection closed: Error during SSL handshake: error:.*:wrong version number \[\d+\]$ignoreregex =
prefregex = ^%(_prefix)s <F-CONTENT>.+</F-CONTENT>$
failregex = ^Invalid server password$
^Wrong certificate or password for existing user$
ignoreregex =
datepattern = ^<W>{DATE}
datepattern = ^<\w>%%Y-%%m-%%d %%H:%%M:%%S\.%%f
journalmatch = _SYSTEMD_UNIT=murmurd.service + _COMM=murmurd