mirror of https://github.com/fail2ban/fail2ban
Illegal -> Invalid
parent
5590dabfd3
commit
d922899bba
|
@ -301,4 +301,4 @@ timepattern = %%b %%d %%H:%%M:%%S
|
|||
# Notes.: regex to match the password failures messages in the logfile.
|
||||
# Values: TEXT Default: (?:Authentication failure|Failed (?:keyboard-interactive/pam|password)) for(?: illegal user)? .* from (?:::f{4,6}:)?(?P<host>\S*)
|
||||
#
|
||||
failregex = : (?:(?:Authentication failure|Failed [-/\w+]+) for(?: [iI]llegal user)?|Illegal user) .* from (?:::f{4,6}:)?(?P<host>\S*)
|
||||
failregex = : (?:(?:Authentication failure|Failed [-/\w+]+) for(?: [iI](?:llegal|nvalid) user)?|[Ii](?:llegal|nvalid) user) .* from (?:::f{4,6}:)?(?P<host>\S*)
|
||||
|
|
|
@ -1,11 +1,14 @@
|
|||
fail2ban (0.5.4-5.4) unstable; urgency=low
|
||||
fail2ban (0.5.4-5.5) unstable; urgency=low
|
||||
|
||||
* Added a notification regarding the importance of 0.5.4-5 change of
|
||||
failregex in the config file
|
||||
* Adjusted address to FSF
|
||||
* Adjusted failregex for SSH so it bans "Illegal user" entries as well, and
|
||||
restricted full failregex more to include ":" at the beginning, because
|
||||
otherwise it might not be sufficient and would revive bug 330827
|
||||
otherwise it might not be sufficient and would revive bug 330827 (closes:
|
||||
#333056)
|
||||
* Adjusted failregex for SSH to accommodate recent changes in logging of
|
||||
SSH: Illegal -> Invalid. Should match both now
|
||||
|
||||
-- Yaroslav Halchenko <debian@onerussian.com> Mon, 3 Oct 2005 22:26:28 -1000
|
||||
|
||||
|
|
Loading…
Reference in New Issue