github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

BF: fixed for sendmail and tested the MTA aspects of this action

pull/468/head
Daniel Black 2013-12-01 19:08:28 +11:00
parent 9df5f4eec8
commit dd356c3cef
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
config/action.d/xarf-login-attack.conf
View File

@ -15,7 +15,7 @@
# https://github.com/abusix/xarf-specification # https://github.com/abusix/xarf-specification
# http://www.x-arf.org/schemata.html # http://www.x-arf.org/schemata.html
# #
# # Author: Daniel Black
# Based on complain written by Russell Odom <russ@gloomytrousers.co.uk> # Based on complain written by Russell Odom <russ@gloomytrousers.co.uk>
# #
# #
@ -42,7 +42,7 @@ actionban = ADDRESSES=`querycontacts <ip>`
(printf -- %%b "<header>\n<message>\n<report>\n${MATCHES}\n"; (printf -- %%b "<header>\n<message>\n<report>\n${MATCHES}\n";
date '+Note: Local timezone is %%z (%%Z)'; date '+Note: Local timezone is %%z (%%Z)';
tail -n <loglines> <logpath> | grep '[^0-9]<ip>[^0-9]'; tail -n <loglines> <logpath> | grep '[^0-9]<ip>[^0-9]';
printf -- %%b "<footer>") | <mailcmd> "abuse report about <ip> - $DATE" <mailargs> $ADDRESSES printf -- %%b "<footer>") | <mailcmd> <mailargs> $ADDRESSES
fi fi
actionunban = actionunban =
@ -50,7 +50,7 @@ actionunban =
[Init] [Init]
# Option: header # Option: header
# Notes: This is really a fixed value # Notes: This is really a fixed value
header = Auto-Submitted: auto-generated\nX-XARF: PLAIN\nContent-Transfer-Encoding: 7bit\nContent-Type: multipart/mixed; charset=utf8;\n boundary=Abuse-bfbb0f920793ac03cb8634bde14d8a1e;\n\n--Abuse-bfbb0f920793ac03cb8634bde14d8a1e\nMIME-Version: 1.0\nContent-Transfer-Encoding: 7bit\nContent-Type: text/plain; charset=utf-8;\n header = Subject: abuse report about $IP - $DATE\nAuto-Submitted: auto-generated\nX-XARF: PLAIN\nContent-Transfer-Encoding: 7bit\nContent-Type: multipart/mixed; charset=utf8;\n boundary=Abuse-bfbb0f920793ac03cb8634bde14d8a1e;\n\n--Abuse-bfbb0f920793ac03cb8634bde14d8a1e\nMIME-Version: 1.0\nContent-Transfer-Encoding: 7bit\nContent-Type: text/plain; charset=utf-8;\n
# Option: footer # Option: footer
# Notes: This is really a fixed value and needs to match the report and header # Notes: This is really a fixed value and needs to match the report and header
@ -70,10 +70,10 @@ message = Dear Sir/Madam,\n\nWe have detected abuse from the IP address $IP, whi
loglines = 9000 loglines = 9000
# Option: mailcmd # Option: mailcmd
# Notes.: Your system mail command. Is passed 2 args: subject and recipient # Notes.: Your system mail command. It is passed the recipient
# Values: CMD # Values: CMD
# #
mailcmd = mail -s mailcmd = /usr/sbin/sendmail
# Option: mailargs # Option: mailargs
# Notes.: Additional arguments to mail command. e.g. for standard Unix mail: # Notes.: Additional arguments to mail command. e.g. for standard Unix mail:
@ -84,7 +84,7 @@ mailcmd = mail -s
# -- -f me@example.com # -- -f me@example.com
# Values: [ STRING ] # Values: [ STRING ]
# #
mailargs = mailargs = -f <sender>
# Option: tlp # Option: tlp
# Notes.: Traffic light protocol defining the sharing of this information. # Notes.: Traffic light protocol defining the sharing of this information.