github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

ENH: Nagios filter 

Sample log for the first failregex is available in the testcases. No example available for the IPv6 denial yet.
pull/603/head
Ivo Truxa 2014-02-03 21:46:07 +01:00
parent 110b8e6905
commit c91fda8619
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
config/filter.d/nagios.conf Normal file
View File

@ -0,0 +1,21 @@
# Fail2Ban filter for Nagios Remote Plugin Executor (nrpe2)
# Detecting unauthorized access to the nrpe2 daemon
# typically logged in /var/log/messages syslog
#
[INCLUDES]
# Read syslog common prefixes
before = common.conf
[Definition]
_daemon = nrpe
failregex = ^%(__prefix_line)sHost <HOST> is not allowed to talk to us!\s*$
= ^%(__prefix_line)sConnection from <HOST> closed. We don't support AF_INET6 addreess family in ACL\s*$
ignoreregex =.
# DEV Notes:
#
# Author: Ivo Truxa - 2014/02/03