- Added pure-ftpd filter. Thanks to Yaroslav Halchenko

git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@560 a942ae1a-1317-0410-a47c-b1dcaea8d605

MANIFEST

@@ -60,26 +60,30 @@ common/__init__.py
 common/version.py
 common/protocol.py
 config/jail.conf
-config/filter.d/postfix.conf
-config/filter.d/vsftpd.conf
 config/filter.d/apache-auth.conf
+config/filter.d/apache-badbots.conf
 config/filter.d/apache-noscript.conf
-config/filter.d/qmail.conf
-config/filter.d/couriersmtp.conf
 config/filter.d/courierlogin.conf
-config/filter.d/sshd.conf
+config/filter.d/couriersmtp.conf
+config/filter.d/exim.conf
+config/filter.d/postfix.conf
 config/filter.d/proftpd.conf
+config/filter.d/pure-ftpd.conf
+config/filter.d/qmail.conf
 config/filter.d/sasl.conf
+config/filter.d/sshd.conf
+config/filter.d/sshd-ddos.conf
+config/filter.d/vsftpd.conf
 config/filter.d/wuftpd.conf
+config/action.d/hostsdeny.conf
+config/action.d/ipfw.conf
 config/action.d/iptables.conf
 config/action.d/iptables-multiport.conf
 config/action.d/iptables-new.conf
-config/action.d/ipfw.conf
-config/action.d/mail-whois.conf
-config/action.d/mail-whois-lines.conf
 config/action.d/mail.conf
 config/action.d/mail-buffered.conf
-config/action.d/hostsdeny.conf
+config/action.d/mail-whois.conf
+config/action.d/mail-whois-lines.conf
 config/action.d/shorewall.conf
 config/fail2ban.conf
 man/fail2ban-client.1
@@ -90,6 +94,7 @@ man/fail2ban-regex.1
 man/fail2ban-regex.h2m
 man/generate-man
 files/gentoo-initd
+files/gentoo-confd
 files/redhat-initd
 files/cacti/fail2ban_stats.sh
 files/cacti/cacti_host_template_fail2ban.xml

config/filter.d/pure-ftpd.conf

@@ -0,0 +1,29 @@
+# Fail2Ban configuration file
+#
+# Author: Cyril Jaquier
+# Modified: Yaroslav Halchenko for pure-ftpd
+#
+# $Revision: 3$
+#
+
+[Definition]
+
+# Error message specified in multiple languages
+__errmsg = (?:Authentication failed for user|Erreur d'authentification pour l'utilisateur)
+
+#
+# Option: failregex
+# Notes.: regex to match the password failures messages in the logfile. The
+#         host must be matched by a group named "host". The tag "<HOST>" can
+#         be used for standard IP/hostname matching and is only an alias for
+#         (?:::f{4,6}:)?(?P<host>\S+)
+# Values: TEXT
+#
+failregex = pure-ftpd: (.+?@<HOST>) \[WARNING\] %(__errmsg)s \[.+\]$
+
+# Option:  ignoreregex
+# Notes.:  regex to ignore. If this regex matches, the line is ignored.
+# Values:  TEXT
+#
+ignoreregex = 
+