Merge pull request #596 from grooverdan/pureftpd

BF: Pureftpd

ChangeLog

@@ -13,10 +13,13 @@ ver. 0.8.13 (2014/XX/XXX) - maintaince-only-from-now-on
 - Fixes:
   - action firewallcmd-ipset had non-working actioncheck. Removed.
     redhat bug #1046816.
+  - filter pureftpd - added _daemon which got removed. Added
 
 - New Features:
 
 - Enhancements:
+  - filter pureftpd - added all translations of "Authentication failed for
+    user"
 
 ver. 0.8.12 (2014/01/22) - things-can-only-get-better
 -----------

config/filter.d/pure-ftpd.conf

@@ -12,13 +12,19 @@ before = common.conf
 
 [Definition]
 
+_daemon = pure-ftpd
+
 # Error message specified in multiple languages
-__errmsg = (?:Authentication failed for user|Erreur d'authentification pour l'utilisateur)
+__errmsg = (?:<EFBFBD>ϥΪ<EFBFBD>\[.*\]<EFBFBD><EFBFBD><EFBFBD>ҥ<EFBFBD><EFBFBD><EFBFBD>|ʹ<EFBFBD><EFBFBD><EFBFBD><EFBFBD>\[.*\]<EFBFBD><EFBFBD>֤ʧ<EFBFBD><EFBFBD>|\[.*\] kullan<EFBFBD>c<EFBFBD>s<EFBFBD> i<EFBFBD>in giri<EFBFBD> hatal<EFBFBD>|<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> \[.*\]|Godkjennelse mislyktes for \[.*\]|Beh<EFBFBD>righetskontroll misslyckas f<EFBFBD>r anv<EFBFBD>ndare \[.*\]|Autentifikacia uzivatela zlyhala \[.*\]|Autentificare esuata pentru utilizatorul \[.*\]|Autentica<EFBFBD><EFBFBD>o falhou para usu<EFBFBD>rio \[.*\]|Autentyfikacja nie powiod<EFBFBD>a si<EFBFBD> dla u<EFBFBD>ytkownika \[.*\]|Autorisatie faalde voor gebruiker \[.*\]|\[.*\] <EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD>|Autenticazione falita per l'utente \[.*\]|Azonos<EFBFBD>t<EFBFBD>s sikertelen \[.*\] felhaszn<EFBFBD>l<EFBFBD>nak|\[.*\] c'est un batard, il connait pas son code|Erreur d'authentification pour l'utilisateur \[.*\]|Autentificaci<EFBFBD>n fallida para el usuario \[.*\]|Authentication failed for user \[.*\]|Authentifizierung fehlgeschlagen f<EFBFBD>r Benutzer \[.*\].|Godkendelse mislykkedes for \[.*\]|Autentifikace u<EFBFBD>ivatele selhala \[.*\])
 
-failregex = ^%(__prefix_line)s\(.+?@<HOST>\) \[WARNING\] %(__errmsg)s \[.+\]\s*$
+failregex = ^%(__prefix_line)s\(.+?@<HOST>\) \[WARNING\] %(__errmsg)s\s*$
 
 ignoreregex = 
 
 # Author: Cyril Jaquier
 # Modified: Yaroslav Halchenko for pure-ftpd
 # Documentation thanks to Blake on http://www.fail2ban.org/wiki/index.php?title=Fail2ban:Community_Portal
+#
+# Only logs to syslog though facility can be changed configuration file/command line
+#
+# fgrep -r MSG_AUTH_FAILED_LOG pure-ftpd-1.0.36/src