mirror of https://github.com/fail2ban/fail2ban
HOSTisized vsftpd regex
parent
caf85bf265
commit
ebc5c6106f
|
@ -1,4 +1,4 @@
|
|||
fail2ban (0.7.5-3~pre3) unstable; urgency=low
|
||||
fail2ban (0.7.5-3~pre4) unstable; urgency=low
|
||||
|
||||
* Fail2ban now bans vsftpd logins (corrected logfile path and failregex)
|
||||
(Closes: #404060)
|
||||
|
|
|
@ -13,7 +13,7 @@ diff -urNad fail2ban-0.7.5~/config/filter.d/vsftpd.conf fail2ban-0.7.5/config/fi
|
|||
# Values: TEXT
|
||||
#
|
||||
-failregex = vsftpd: \(pam_unix\) authentication failure; .* rhost=<HOST>
|
||||
+failregex = (?:vsftpd: \(pam_unix\) authentication failure; .* rhost=(?:::f{4,6}:)?(?P<host>\S+)|\[.+\] FAIL LOGIN: Client "(?:::f{4,6}:)?(?P<host2>\S+)"$)
|
||||
+failregex = (?:vsftpd: \(pam_unix\) authentication failure; .* rhost=<HOST>|\[.+\] FAIL LOGIN: Client "<HOST>"$)
|
||||
|
||||
# Option: ignoreregex
|
||||
# Notes.: regex to ignore. If this regex matches, the line is ignored.
|
||||
|
|
Loading…
Reference in New Issue