github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

HOSTisized vsftpd regex

pull/3/head
Yaroslav Halchenko 2006-12-22 18:39:57 +00:00
parent caf85bf265
commit ebc5c6106f
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
debian/changelog vendored
View File

@ -1,4 +1,4 @@
fail2ban (0.7.5-3~pre3) unstable; urgency=low fail2ban (0.7.5-3~pre4) unstable; urgency=low
* Fail2ban now bans vsftpd logins (corrected logfile path and failregex) * Fail2ban now bans vsftpd logins (corrected logfile path and failregex)
(Closes: #404060) (Closes: #404060)

2
debian/patches/10_vsftpd_regex.dpatch vendored
View File

@ -13,7 +13,7 @@ diff -urNad fail2ban-0.7.5~/config/filter.d/vsftpd.conf fail2ban-0.7.5/config/fi
# Values: TEXT # Values: TEXT
# #
-failregex = vsftpd: \(pam_unix\) authentication failure; .* rhost=<HOST> -failregex = vsftpd: \(pam_unix\) authentication failure; .* rhost=<HOST>
+failregex = (?:vsftpd: \(pam_unix\) authentication failure; .* rhost=(?:::f{4,6}:)?(?P<host>\S+)|\[.+\] FAIL LOGIN: Client "(?:::f{4,6}:)?(?P<host2>\S+)"$) +failregex = (?:vsftpd: \(pam_unix\) authentication failure; .* rhost=<HOST>|\[.+\] FAIL LOGIN: Client "<HOST>"$)
# Option: ignoreregex # Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored. # Notes.: regex to ignore. If this regex matches, the line is ignored.