mirror of https://github.com/fail2ban/fail2ban
				
				
				
			added debian specific patches for the new upstream
							parent
							
								
									a4899fabf8
								
							
						
					
					
						commit
						dae225330c
					
				| 
						 | 
				
			
			@ -1,6 +1,6 @@
 | 
			
		|||
fail2ban (0.7.1-1) UNRELEASED; urgency=low
 | 
			
		||||
fail2ban (0.7.1-0.1) UNRELEASED; urgency=low
 | 
			
		||||
 | 
			
		||||
  * (NOT RELEASED YET) New upstream release
 | 
			
		||||
  * New upstream release (closes: #370095,#366307)
 | 
			
		||||
 | 
			
		||||
 -- Yaroslav Halchenko <debian@onerussian.com>  Tue,  5 Sep 2006 00:26:08 -0400
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1 +1,5 @@
 | 
			
		|||
X00_rigid_python24
 | 
			
		||||
X00_ssh_path
 | 
			
		||||
X00_apache_log_path
 | 
			
		||||
X00_default_jails
 | 
			
		||||
X00_apache_log_failregex
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -0,0 +1,17 @@
 | 
			
		|||
#! /bin/sh /usr/share/dpatch/dpatch-run
 | 
			
		||||
## apache_log_failregex.dpatch by  <debian@onerussian.com>
 | 
			
		||||
##
 | 
			
		||||
## All lines beginning with `## DP:' are a description of the patch.
 | 
			
		||||
## DP: Fixed apache failregex
 | 
			
		||||
 | 
			
		||||
@DPATCH@
 | 
			
		||||
 | 
			
		||||
diff -Naur -x '*~' fail2ban-0.7.1/config/filter.d/apache-auth.conf fail2ban-0.7.1.modified/config/filter.d/apache-auth.conf
 | 
			
		||||
--- fail2ban-0.7.1/config/filter.d/apache-auth.conf	2006-09-05 11:13:54.000000000 -0400
 | 
			
		||||
+++ fail2ban-0.7.1.modified/config/filter.d/apache-auth.conf	2006-09-05 11:12:19.000000000 -0400
 | 
			
		||||
@@ -39,4 +39,4 @@
 | 
			
		||||
 # Notes.:  regex to match the password failure messages in the logfile.
 | 
			
		||||
 # Values:  TEXT  Default:  authentication failure|user .* not found
 | 
			
		||||
 #
 | 
			
		||||
-failregex = authentication failure|user .* not found
 | 
			
		||||
+failregex = [[]client (?P<host>\S*)[]] user .*(?:: authentication failure|not found)
 | 
			
		||||
| 
						 | 
				
			
			@ -0,0 +1,20 @@
 | 
			
		|||
#! /bin/sh /usr/share/dpatch/dpatch-run
 | 
			
		||||
## apache_log_path.dpatch by  <debian@onerussian.com>
 | 
			
		||||
##
 | 
			
		||||
## All lines beginning with `## DP:' are a description of the patch.
 | 
			
		||||
## DP: Fixed apache path to the default in debian
 | 
			
		||||
 | 
			
		||||
@DPATCH@
 | 
			
		||||
 | 
			
		||||
diff -Naur -x '*~' fail2ban-0.7.1/config/filter.d/apache-auth.conf fail2ban-0.7.1.modified/config/filter.d/apache-auth.conf
 | 
			
		||||
--- fail2ban-0.7.1/config/filter.d/apache-auth.conf	2006-07-17 15:25:03.000000000 -0400
 | 
			
		||||
+++ fail2ban-0.7.1.modified/config/filter.d/apache-auth.conf	2006-09-05 10:59:07.000000000 -0400
 | 
			
		||||
@@ -17,7 +17,7 @@
 | 
			
		||||
 # Notes.:  logfile to monitor.
 | 
			
		||||
 # Values:  FILE  Default:  /var/log/httpd/access_log
 | 
			
		||||
 #
 | 
			
		||||
-logfile = /var/log/httpd/access_log
 | 
			
		||||
+logfile = /var/log/apache/error.log
 | 
			
		||||
 
 | 
			
		||||
 # Option:  timeregex
 | 
			
		||||
 # Notes.:  regex to match timestamp in Apache logfile. For TAI64N format,
 | 
			
		||||
| 
						 | 
				
			
			@ -0,0 +1,37 @@
 | 
			
		|||
#! /bin/sh /usr/share/dpatch/dpatch-run
 | 
			
		||||
## debian_jail.dpatch by  <debian@onerussian.com>
 | 
			
		||||
##
 | 
			
		||||
## All lines beginning with `## DP:' are a description of the patch.
 | 
			
		||||
## DP: Default debian jails
 | 
			
		||||
 | 
			
		||||
@DPATCH@
 | 
			
		||||
 | 
			
		||||
diff -Naur -x '*~' fail2ban-0.7.1/config/jail.conf fail2ban-0.7.1.modified/config/jail.conf
 | 
			
		||||
--- fail2ban-0.7.1/config/jail.conf	2006-08-20 17:33:11.000000000 -0400
 | 
			
		||||
+++ fail2ban-0.7.1.modified/config/jail.conf	2006-09-05 10:56:44.000000000 -0400
 | 
			
		||||
@@ -5,11 +5,20 @@
 | 
			
		||||
 # $Revision: 281 $
 | 
			
		||||
 #
 | 
			
		||||
 
 | 
			
		||||
-[dummy]
 | 
			
		||||
+[SSH]
 | 
			
		||||
 
 | 
			
		||||
-enabled = false
 | 
			
		||||
+enabled = true
 | 
			
		||||
 filter = sshd
 | 
			
		||||
-action = hostsdeny[file=/tmp/hosts.deny]
 | 
			
		||||
-         mail[name=SSH, dest=cyril.jaquier@bluewin.ch]
 | 
			
		||||
-maxretry = 2
 | 
			
		||||
+action = iptables
 | 
			
		||||
+         mail[name=SSH, dest=root@localhost]
 | 
			
		||||
+maxretry = 5
 | 
			
		||||
+bantime = 10
 | 
			
		||||
+
 | 
			
		||||
+[Apache]
 | 
			
		||||
+
 | 
			
		||||
+enabled = false
 | 
			
		||||
+filter = apache-auth
 | 
			
		||||
+action = iptables
 | 
			
		||||
+         mail[name=Apache, dest=root@localhost]
 | 
			
		||||
+maxretry = 5
 | 
			
		||||
 bantime = 10
 | 
			
		||||
| 
						 | 
				
			
			@ -0,0 +1,20 @@
 | 
			
		|||
#! /bin/sh /usr/share/dpatch/dpatch-run
 | 
			
		||||
## ssh_path.dpatch by  <debian@onerussian.com>
 | 
			
		||||
##
 | 
			
		||||
## All lines beginning with `## DP:' are a description of the patch.
 | 
			
		||||
## DP: Debian specific ssh path
 | 
			
		||||
 | 
			
		||||
@DPATCH@
 | 
			
		||||
 | 
			
		||||
diff -x '*~' -Naur fail2ban-0.7.1/config/filter.d/sshd.conf fail2ban-0.7.1.modified/config/filter.d/sshd.conf
 | 
			
		||||
--- fail2ban-0.7.1/config/filter.d/sshd.conf	2006-08-06 18:12:57.000000000 -0400
 | 
			
		||||
+++ fail2ban-0.7.1.modified/config/filter.d/sshd.conf	2006-09-05 10:39:21.000000000 -0400
 | 
			
		||||
@@ -17,7 +17,7 @@
 | 
			
		||||
 # Notes.:  logfile to monitor.
 | 
			
		||||
 # Values:  FILE  Default:  /var/log/secure
 | 
			
		||||
 #
 | 
			
		||||
-logpath = /var/log/secure
 | 
			
		||||
+logpath = /var/log/auth.log
 | 
			
		||||
 
 | 
			
		||||
 # Option:  timeregex
 | 
			
		||||
 # Notes.:  regex to match timestamp in SSH logfile. For TAI64N format,
 | 
			
		||||
		Loading…
	
		Reference in New Issue