diff --git a/MANIFEST b/MANIFEST index d49b19bc..83d7ae6a 100644 --- a/MANIFEST +++ b/MANIFEST @@ -60,26 +60,30 @@ common/__init__.py common/version.py common/protocol.py config/jail.conf -config/filter.d/postfix.conf -config/filter.d/vsftpd.conf config/filter.d/apache-auth.conf +config/filter.d/apache-badbots.conf config/filter.d/apache-noscript.conf -config/filter.d/qmail.conf -config/filter.d/couriersmtp.conf config/filter.d/courierlogin.conf -config/filter.d/sshd.conf +config/filter.d/couriersmtp.conf +config/filter.d/exim.conf +config/filter.d/postfix.conf config/filter.d/proftpd.conf +config/filter.d/pure-ftpd.conf +config/filter.d/qmail.conf config/filter.d/sasl.conf +config/filter.d/sshd.conf +config/filter.d/sshd-ddos.conf +config/filter.d/vsftpd.conf config/filter.d/wuftpd.conf +config/action.d/hostsdeny.conf +config/action.d/ipfw.conf config/action.d/iptables.conf config/action.d/iptables-multiport.conf config/action.d/iptables-new.conf -config/action.d/ipfw.conf -config/action.d/mail-whois.conf -config/action.d/mail-whois-lines.conf config/action.d/mail.conf config/action.d/mail-buffered.conf -config/action.d/hostsdeny.conf +config/action.d/mail-whois.conf +config/action.d/mail-whois-lines.conf config/action.d/shorewall.conf config/fail2ban.conf man/fail2ban-client.1 @@ -90,6 +94,7 @@ man/fail2ban-regex.1 man/fail2ban-regex.h2m man/generate-man files/gentoo-initd +files/gentoo-confd files/redhat-initd files/cacti/fail2ban_stats.sh files/cacti/cacti_host_template_fail2ban.xml diff --git a/config/filter.d/pure-ftpd.conf b/config/filter.d/pure-ftpd.conf new file mode 100644 index 00000000..31557468 --- /dev/null +++ b/config/filter.d/pure-ftpd.conf @@ -0,0 +1,29 @@ +# Fail2Ban configuration file +# +# Author: Cyril Jaquier +# Modified: Yaroslav Halchenko for pure-ftpd +# +# $Revision: 3$ +# + +[Definition] + +# Error message specified in multiple languages +__errmsg = (?:Authentication failed for user|Erreur d'authentification pour l'utilisateur) + +# +# Option: failregex +# Notes.: regex to match the password failures messages in the logfile. The +# host must be matched by a group named "host". The tag "" can +# be used for standard IP/hostname matching and is only an alias for +# (?:::f{4,6}:)?(?P\S+) +# Values: TEXT +# +failregex = pure-ftpd: (.+?@) \[WARNING\] %(__errmsg)s \[.+\]$ + +# Option: ignoreregex +# Notes.: regex to ignore. If this regex matches, the line is ignored. +# Values: TEXT +# +ignoreregex = +