github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

- Updated regular expressions 

git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@598 a942ae1a-1317-0410-a47c-b1dcaea8d605
_tent/ipv6_via_aInfo
Cyril Jaquier 2007-07-10 20:24:44 +00:00
parent 568264d6c7
commit f714c96d0e
2 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGELOG
View File

@ -12,6 +12,7 @@ ver. 0.8.1 (2007/??/??) - stable
- Fixed vulnerability in sshd.conf. Thanks to Daniel B. Cid - Fixed vulnerability in sshd.conf. Thanks to Daniel B. Cid
- Expand <HOST> in ignoreregex. Thanks to Yaroslav Halchenko - Expand <HOST> in ignoreregex. Thanks to Yaroslav Halchenko
- Improved regular expressions. Thanks to Yaroslav Halchenko - Improved regular expressions. Thanks to Yaroslav Halchenko
and others
- Added sendmail actions. The action started with "mail" are - Added sendmail actions. The action started with "mail" are
now deprecated. Thanks to Raphaël Marichez now deprecated. Thanks to Raphaël Marichez
- Added "ignoreregex" support to fail2ban-regex - Added "ignoreregex" support to fail2ban-regex

11
config/filter.d/sshd.conf
View File

@ -14,11 +14,12 @@
# (?:::f{4,6}:)?(?P<host>\S+) # (?:::f{4,6}:)?(?P<host>\S+)
# Values: TEXT # Values: TEXT
# #
failregex = Authentication failure for .* from <HOST>$ failregex = Authentication failure for .+ from <HOST>(?: port \d+ ssh2)?$
Failed [-/\w]+ for .* from <HOST>$ Failed [-/\w]+ for .+ from <HOST>(?: port \d+ ssh2)?$
ROOT LOGIN REFUSED .* FROM <HOST>$ ROOT LOGIN REFUSED .+ FROM <HOST>(?: port \d+ ssh2)?$
[iI](?:llegal|nvalid) user .* from <HOST>$ [iI](?:llegal|nvalid) user .+ from <HOST>(?: port \d+ ssh2)?$
User .* from <HOST> not allowed because not listed in AllowUsers$ User .+ from <HOST> not allowed because not listed in AllowUsers$
User .+ from <HOST> not allowed because none of user's groups are listed in AllowGroups$
# Option: ignoreregex # Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored. # Notes.: regex to ignore. If this regex matches, the line is ignored.