From d922899bbaab590a7e3c9cb73955e5a0b86d905e Mon Sep 17 00:00:00 2001 From: Yaroslav Halchenko Date: Mon, 10 Oct 2005 15:57:35 +0000 Subject: [PATCH] Illegal -> Invalid --- config/fail2ban.conf.default | 2 +- debian/changelog | 7 +++++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/config/fail2ban.conf.default b/config/fail2ban.conf.default index d6b5dd9d..6035941b 100644 --- a/config/fail2ban.conf.default +++ b/config/fail2ban.conf.default @@ -301,4 +301,4 @@ timepattern = %%b %%d %%H:%%M:%%S # Notes.: regex to match the password failures messages in the logfile. # Values: TEXT Default: (?:Authentication failure|Failed (?:keyboard-interactive/pam|password)) for(?: illegal user)? .* from (?:::f{4,6}:)?(?P\S*) # -failregex = : (?:(?:Authentication failure|Failed [-/\w+]+) for(?: [iI]llegal user)?|Illegal user) .* from (?:::f{4,6}:)?(?P\S*) +failregex = : (?:(?:Authentication failure|Failed [-/\w+]+) for(?: [iI](?:llegal|nvalid) user)?|[Ii](?:llegal|nvalid) user) .* from (?:::f{4,6}:)?(?P\S*) diff --git a/debian/changelog b/debian/changelog index 3f0461e0..3716db36 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,11 +1,14 @@ -fail2ban (0.5.4-5.4) unstable; urgency=low +fail2ban (0.5.4-5.5) unstable; urgency=low * Added a notification regarding the importance of 0.5.4-5 change of failregex in the config file * Adjusted address to FSF * Adjusted failregex for SSH so it bans "Illegal user" entries as well, and restricted full failregex more to include ":" at the beginning, because - otherwise it might not be sufficient and would revive bug 330827 + otherwise it might not be sufficient and would revive bug 330827 (closes: + #333056) + * Adjusted failregex for SSH to accommodate recent changes in logging of + SSH: Illegal -> Invalid. Should match both now -- Yaroslav Halchenko Mon, 3 Oct 2005 22:26:28 -1000