From b6d9f795dca4783c84cf57a9e56c551e4fa09905 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fran=C3=A7ois=20Boulogne?= <fboulogne at april dot org>
Date: Sat, 24 Dec 2011 21:51:18 +0100
Subject: [PATCH] add filter for lighttpd mod_auth failure

---
 config/filter.d/lighttpd-auth.conf | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 config/filter.d/lighttpd-auth.conf

diff --git a/config/filter.d/lighttpd-auth.conf b/config/filter.d/lighttpd-auth.conf
new file mode 100644
index 00000000..4e5fc38f
--- /dev/null
+++ b/config/filter.d/lighttpd-auth.conf
@@ -0,0 +1,19 @@
+# Fail2Ban configuration file
+#
+# Author: Francois Boulogne <fboulogne@april.org>
+#
+
+[Definition]
+
+# Option:  failregex
+# Notes.:  regex to match wrong passwords as notified by lighttpd's auth Module
+# Values:  TEXT
+#
+failregex = .*http_auth.*password doesn\'t match.*IP: <HOST>
+
+
+# Option:  ignoreregex
+# Notes.:  regex to ignore. If this regex matches, the line is ignored.
+# Values:  TEXT
+#
+ignoreregex =