mirror of https://github.com/fail2ban/fail2ban
git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@317 a942ae1a-1317-0410-a47c-b1dcaea8d6050.x
parent
511d9a7539
commit
131a0a9cb3
@ -0,0 +1,42 @@
|
|||||||
|
# Fail2Ban configuration file
|
||||||
|
#
|
||||||
|
# Author: Cyril Jaquier
|
||||||
|
#
|
||||||
|
# $Revision: 267 $
|
||||||
|
#
|
||||||
|
|
||||||
|
[Definition]
|
||||||
|
|
||||||
|
# Option: maxretry
|
||||||
|
# Notes.: number of failures before IP gets banned.
|
||||||
|
# Values: NUM Default: 5
|
||||||
|
#
|
||||||
|
maxretry = 5
|
||||||
|
|
||||||
|
# Option: logpath
|
||||||
|
# Notes.: logfile to monitor.
|
||||||
|
# Values: FILE Default: /var/log/messages
|
||||||
|
#
|
||||||
|
logpath = /var/log/messages
|
||||||
|
|
||||||
|
# Option: timeregex
|
||||||
|
# Notes.: regex to match timestamp in the logfile. For TAI64N format,
|
||||||
|
# use timeregex = @[0-9a-f]{24}
|
||||||
|
# Values: [Mar 7 17:53:28]
|
||||||
|
# Default: \S{3}\s{1,2}\d{1,2} \d{2}:\d{2}:\d{2}
|
||||||
|
#
|
||||||
|
timeregex = \S{3}\s{1,2}\d{1,2} \d{2}:\d{2}:\d{2}
|
||||||
|
|
||||||
|
# Option: timepattern
|
||||||
|
# Notes.: format used in "timeregex" fields definition. Note that '%' must be
|
||||||
|
# escaped with '%' (see http://rgruet.free.fr/PQR2.3.html#timeModule).
|
||||||
|
# For TAI64N format, use timepattern = tai64n
|
||||||
|
# Values: TEXT Default: %%b %%d %%H:%%M:%%S
|
||||||
|
#
|
||||||
|
timepattern = %%b %%d %%H:%%M:%%S
|
||||||
|
|
||||||
|
# Option: failregex
|
||||||
|
# Notes.: regex to match the password failures messages in the logfile.
|
||||||
|
# Values: TEXT Default: Authentication failure|Failed password|Invalid user
|
||||||
|
#
|
||||||
|
failregex = error,relay=(?:::f{4,6}:)?(?P<host>\S*),.*550 User unknown
|
Loading…
Reference in new issue