From 14a9a2d968ab50bc0f35bd85c31bc8ed13bf7f26 Mon Sep 17 00:00:00 2001
From: Joern Muehlencord <jomu@muehlencord.intra>
Date: Mon, 25 May 2015 13:48:25 +0200
Subject: [PATCH] add froxlor-auth filter and jail 0

---
 ChangeLog                              | 2 ++
 config/jail.conf                       | 7 +++++++
 fail2ban/tests/files/logs/froxlor-auth | 6 +++---
 3 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index 8bc0ca7f..b7a9288e 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -13,6 +13,8 @@ ver. 0.9.3 (2015/XX/XXX) - wanna-be-released
    * Fix fail2ban-regex not parsing journalmatch correctly from filter config
 
 - New Features:
+   - New filters:
+     - froxlor-auth  Thanks Joern Muehlencord
 
 - Enhancements:
 
diff --git a/config/jail.conf b/config/jail.conf
index 732aeab9..cc96cd7a 100644
--- a/config/jail.conf
+++ b/config/jail.conf
@@ -408,6 +408,13 @@ port    = 10000
 logpath = %(syslog_authpriv)s
 
 
+[froxlor-auth]
+
+port    = http,https
+logpath  = %(syslog_authpriv)s
+
+
+
 #
 # HTTP Proxy servers
 #
diff --git a/fail2ban/tests/files/logs/froxlor-auth b/fail2ban/tests/files/logs/froxlor-auth
index ba585c6d..2a2c2fc4 100644
--- a/fail2ban/tests/files/logs/froxlor-auth
+++ b/fail2ban/tests/files/logs/froxlor-auth
@@ -1,5 +1,5 @@
-# failJSON: { "time": "2015-06-21T00:56:27", "match": true , "host": "1.2.3.4" }
+# failJSON: { "time": "2005-05-21T00:56:27", "match": true , "host": "1.2.3.4" }
 May 21 00:56:27 jomu Froxlor: [Login Action 1.2.3.4] Unknown user 'user' tried to login.
-# failJSON: { "time": "2015-06-21T00:57:38", "match": true , "host": "1.2.3.4" }
-May 21 00:57:38 jomu Froxlor: [Login Action 83.87.126.64] User 'admin' tried to login with wrong password.
+# failJSON: { "time": "2005-05-21T00:57:38", "match": true , "host": "1.2.3.4" }
+May 21 00:57:38 jomu Froxlor: [Login Action 1.2.3.4] User 'admin' tried to login with wrong password.