Browse Source

ENH: Nagios filter

Sample log for the first failregex is available in the testcases. No example available for the IPv6 denial yet.
pull/603/head
Ivo Truxa 11 years ago
parent
commit
c91fda8619
  1. 21
      config/filter.d/nagios.conf

21
config/filter.d/nagios.conf

@ -0,0 +1,21 @@
# Fail2Ban filter for Nagios Remote Plugin Executor (nrpe2)
# Detecting unauthorized access to the nrpe2 daemon
# typically logged in /var/log/messages syslog
#
[INCLUDES]
# Read syslog common prefixes
before = common.conf
[Definition]
_daemon = nrpe
failregex = ^%(__prefix_line)sHost <HOST> is not allowed to talk to us!\s*$
= ^%(__prefix_line)sConnection from <HOST> closed. We don't support AF_INET6 addreess family in ACL\s*$
ignoreregex =.
# DEV Notes:
#
# Author: Ivo Truxa - 2014/02/03
Loading…
Cancel
Save