github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

Illegal -> Invalid

debian-releases/etch
Yaroslav Halchenko 2005-10-10 15:57:35 +00:00
parent 5590dabfd3
commit d922899bba
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
config/fail2ban.conf.default
View File

@ -301,4 +301,4 @@ timepattern = %%b %%d %%H:%%M:%%S
# Notes.: regex to match the password failures messages in the logfile.
# Values: TEXT Default: (?:Authentication failure|Failed (?:keyboard-interactive/pam|password)) for(?: illegal user)? .* from (?:::f{4,6}:)?(?P<host>\S*)
#
failregex = : (?:(?:Authentication failure|Failed [-/\w+]+) for(?: [iI]llegal user)?|Illegal user) .* from (?:::f{4,6}:)?(?P<host>\S*)
failregex = : (?:(?:Authentication failure|Failed [-/\w+]+) for(?: [iI](?:llegal|nvalid) user)?|[Ii](?:llegal|nvalid) user) .* from (?:::f{4,6}:)?(?P<host>\S*)

7
debian/changelog vendored
View File

@ -1,11 +1,14 @@
fail2ban (0.5.4-5.4) unstable; urgency=low
fail2ban (0.5.4-5.5) unstable; urgency=low
* Added a notification regarding the importance of 0.5.4-5 change of
failregex in the config file
* Adjusted address to FSF
* Adjusted failregex for SSH so it bans "Illegal user" entries as well, and
restricted full failregex more to include ":" at the beginning, because
otherwise it might not be sufficient and would revive bug 330827
otherwise it might not be sufficient and would revive bug 330827 (closes:
#333056)
* Adjusted failregex for SSH to accommodate recent changes in logging of
SSH: Illegal -> Invalid. Should match both now
-- Yaroslav Halchenko <debian@onerussian.com> Mon, 3 Oct 2005 22:26:28 -1000