From bb8e6107955c3ac47f1982d0a42df8a2b116a47e Mon Sep 17 00:00:00 2001
From: Cyril Jaquier <cyril.jaquier@fail2ban.org>
Date: Mon, 13 Oct 2008 14:37:25 +0000
Subject: [PATCH] - Added apache-nohome.conf. Thanks to Yaroslav Halchenko.

git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@715 a942ae1a-1317-0410-a47c-b1dcaea8d605
---
 ChangeLog                          |  1 +
 MANIFEST                           |  1 +
 config/filter.d/apache-nohome.conf | 23 +++++++++++++++++++++++
 3 files changed, 25 insertions(+)
 create mode 100644 config/filter.d/apache-nohome.conf

diff --git a/ChangeLog b/ChangeLog
index f3e13719..86b6447b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -17,6 +17,7 @@ ver. 0.8.4 (2008/??/??) - stable
 - Try to match the regex even if the line does not contain a
   valid date/time. Described in Debian #491253. Thanks to
   Yaroslav Halchenko.
+- Added/improved filters and date formats.
 
 ver. 0.8.3 (2008/07/17) - stable
 ----------
diff --git a/MANIFEST b/MANIFEST
index 11ed92af..f2bfa255 100644
--- a/MANIFEST
+++ b/MANIFEST
@@ -59,6 +59,7 @@ config/jail.conf
 config/filter.d/common.conf
 config/filter.d/apache-auth.conf
 config/filter.d/apache-badbots.conf
+config/filter.d/apache-nohome.conf
 config/filter.d/apache-noscript.conf
 config/filter.d/apache-overflows.conf
 config/filter.d/courierlogin.conf
diff --git a/config/filter.d/apache-nohome.conf b/config/filter.d/apache-nohome.conf
new file mode 100644
index 00000000..2673c2f4
--- /dev/null
+++ b/config/filter.d/apache-nohome.conf
@@ -0,0 +1,23 @@
+# Fail2Ban configuration file
+#
+# Author: Yaroslav O. Halchenko <debian@onerussian.com>
+#
+# $Revision: 569 $
+#
+
+[Definition]
+
+# Option:  failregex
+# Notes.:  regex to match failures to find a home directory on a server, which
+#          became popular last days. Most often attacker just uses IP instead of
+#          domain name -- so expect to see them in generic error.log if you have
+#          per-domain log files.
+# Values:  TEXT
+#
+failregex = [[]client <HOST>[]] File does not exist: .*/~.*
+
+# Option:  ignoreregex
+# Notes.:  regex to ignore. If this regex matches, the line is ignored.
+# Values:  TEXT
+#
+ignoreregex =