diff --git a/config/fail2ban.conf.default b/config/fail2ban.conf.default index c510fb44..2641fbdc 100644 --- a/config/fail2ban.conf.default +++ b/config/fail2ban.conf.default @@ -319,7 +319,7 @@ timepattern = %%a %%b %%d %%H:%%M:%%S %%Y # Notes.: regex to match the password failure messages in the logfile. # Values: TEXT Default: [[]client (?P\S*)[]] user .*(?:: authentication failure|not found) # -failregex = ^(?P\S*) -.*"GET .*awstats\.pl\?configdir=\|echo.*404 +failregex = ^(?P\S*) -.*"GET .*awstats\.pl\?configdir=\|echo.* [SSH] # Option: enabled diff --git a/debian/changelog b/debian/changelog index f2528b80..40bcf226 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,4 +1,4 @@ -fail2ban (0.6.0-3.1) unstable; urgency=low +fail2ban (0.6.0-3.2) unstable; urgency=low * Added section ApacheAttacks to specify some common patterns of attacks on a webserver (awstats.pl as a try). This section stays split from Apache