github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

ENH: add wu-ftpd failregex for use against syslog (Closes: #514239)

pull/8/merge
Yaroslav Halchenko 2012-07-31 15:43:13 -04:00
parent a512ea47d2
commit 6ad55f64b3
2 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
config/filter.d/wuftpd.conf
View File

@ -12,6 +12,7 @@
# Values: TEXT
#
failregex = wu-ftpd(?:\[\d+\])?:\s+\(pam_unix\)\s+authentication failure.* rhost=<HOST>$
wu-ftpd(?:\[\d+\])?: *failed login from .*\[<HOST>\] *$
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.

2
testcases/files/logs/wu-ftpd Normal file
View File

@ -0,0 +1,2 @@
# This login line is from syslog
Oct 6 09:59:26 myserver wu-ftpd[18760]: failed login from hj-145-173-a8.bta.net.cn [202.108.145.173]