From 14d609941b9e4a7f3db9a82ad1b0b27fe404af6b Mon Sep 17 00:00:00 2001
From: Yaroslav Halchenko <debian@onerussian.com>
Date: Tue, 31 Jul 2012 15:59:44 -0400
Subject: [PATCH] monitor syslog not auth.log for wuftpd

---
 debian/changelog | 3 ++-
 debian/jail.conf | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 9b290296..bc27aafc 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -11,7 +11,8 @@ fail2ban (0.8.7-1) experimental; urgency=low
     - document in config/*.conf on how to inline comments (Closes: #676146)
     - match possibly present "pam_unix(sshd:auth):" portion for sshd
       (Closes: #648020)
-    - add wu-ftpd failregex for use against syslog (Closes: #514239)
+    - wu-ftpd: added failregex for use against syslog. Switch to monitor syslog
+      (instead of auth.log) by default (Closes: #514239)
     - anchor chain name in actioncheck's for iptables actions (Closes: #672228)
 
  -- Yaroslav Halchenko <debian@onerussian.com>  Tue, 31 Jul 2012 14:04:02 -0400
diff --git a/debian/jail.conf b/debian/jail.conf
index fae7ee6a..b6610b63 100644
--- a/debian/jail.conf
+++ b/debian/jail.conf
@@ -214,7 +214,7 @@ maxretry = 6
 enabled  = false
 port     = ftp,ftp-data,ftps,ftps-data
 filter   = wuftpd
-logpath  = /var/log/auth.log
+logpath  = /var/log/syslog
 maxretry = 6