fail2ban/config/filter.d
sebres d1a73d3004 filter.d/apache-auth.conf:
- ignore errors from mod_evasive in `normal` mode (mode-controlled now) (gh-2548);
  - extended with option `mode` - `normal` (default) and `aggressive`
close gh-2548
2019-10-18 11:26:19 +02:00
..
ignorecommands amend for 3036ed18893b6aae6619e53201aa53deb701b94f: eliminate "invalid sequence" warnings 2019-05-14 21:40:33 +02:00
3proxy.conf added possibility to specify more precise default date pattern: 2016-10-17 11:18:30 +02:00
apache-auth.conf filter.d/apache-auth.conf: 2019-10-18 11:26:19 +02:00
apache-badbots.conf Merge remote-tracking branch 'upstream/master' into 0.10 2017-09-08 11:11:05 +02:00
apache-botsearch.conf Merge branch 'master' into 0.10 2017-10-18 19:00:23 +02:00
apache-common.conf filter.d/apache-auth.conf: 2019-10-18 11:26:19 +02:00
apache-fakegooglebot.conf more precise date template handling (WARNING: this commit creates possible incompatibilities): 2016-10-17 11:20:27 +02:00
apache-modsecurity.conf updated 2019-04-24 21:35:19 +02:00
apache-nohome.conf
apache-noscript.conf filter.d/apache-noscript.conf: closes #2466 - matches "Primary script unknown" without "\n" (optional now) 2019-07-10 12:45:53 +02:00
apache-overflows.conf filter.d/apache-overflows.conf: rewritten without end-anchor ($), because apache-log could contain very long URLs (and/or referrer), the parsing of it anchored way may be very vulnerable (at least as regards the system resources, see gh-1790). 2017-06-15 11:16:19 +02:00
apache-pass.conf more precise date template handling (WARNING: this commit creates possible incompatibilities): 2016-10-17 11:20:27 +02:00
apache-shellshock.conf Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10 2017-12-01 15:53:11 +01:00
assp.conf Merge branch '0.9-fix-regex-using-journal' into 0.10-fix-regex-using-journal (merge point against 0.9 after back-porting gh-1660 from 0.10) 2017-01-10 11:25:41 +01:00
asterisk.conf filter.d/asterisk.conf: relaxing protocol RE-part before IP in RemoteAddress (gh-2531) 2019-09-26 21:46:26 +02:00
botsearch-common.conf Update botsearch-common.conf (#1759) 2017-04-26 20:14:39 +02:00
common.conf amend to #2387: 2019-07-09 21:48:43 +02:00
counter-strike.conf added possibility to specify more precise default date pattern: 2016-10-17 11:18:30 +02:00
courier-auth.conf Make courier-auth regexp a non-captured group 2017-04-28 16:58:24 +02:00
courier-smtp.conf Several filters optimized with pre-filtering using new option `prefregex` 2017-02-21 15:54:59 +01:00
cyrus-imap.conf filter.d/cyrus-imap.conf: fixed `failregex` - accept entries without login-info resp. hostname before IP address 2017-03-09 16:13:45 +01:00
directadmin.conf added possibility to specify more precise default date pattern: 2016-10-17 11:18:30 +02:00
domino-smtp.conf filter.d/domino-smtp.conf: 2018-09-21 14:14:00 +02:00
dovecot.conf filter.d/dovecot.conf: failregex enhancement to catch disconnected with "proxy dest auth failed"; 2018-07-17 15:06:42 +02:00
dropbear.conf Several filters optimized with pre-filtering using new option `prefregex` 2017-02-21 15:54:59 +01:00
drupal-auth.conf Add drupal-auth filter and jail 2015-04-27 13:10:27 -04:00
ejabberd-auth.conf small amend to gh-1850: removed greedy catch-all at end. 2017-08-07 15:24:16 +02:00
exim-common.conf filter.d/exim.conf: cherry-picked from 0.10, match complex time like `D=2m42s` (closes gh-1766) 2017-05-07 13:02:32 +02:00
exim-spam.conf
exim.conf filter.d/exim.conf: failregex extended with SMTP call dropped: too many syntax or protocol errors. 2018-02-19 09:50:46 +01:00
freeswitch.conf filter.d/freeswitch.conf: provide mode parameter, allows to avoid matching of messages like `auth challenge (REGISTER)` (see gh-2163) (currently `extra` as default to be backwards-compatible), see comments in filter how to set it to mode `normal`. 2018-08-03 11:42:15 +02:00
froxlor-auth.conf Several filters optimized with pre-filtering using new option `prefregex` 2017-02-21 15:54:59 +01:00
groupoffice.conf ENH: define ignoreregex for all filters explicitly, to avoid warnings (Closes #934) 2015-01-30 10:38:28 -05:00
gssftpd.conf
guacamole.conf more precise date template handling (WARNING: this commit creates possible incompatibilities): 2016-10-17 11:20:27 +02:00
haproxy-http-auth.conf Update haproxy-http-auth.conf 2017-04-11 09:11:08 +02:00
horde.conf
kerio.conf Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10 2017-06-12 13:11:45 +02:00
lighttpd-auth.conf regex updated using non-capturing groups 2018-01-16 14:23:47 +01:00
mongodb-auth.conf code review, makes the test cases workable, added dev-notes 2016-11-28 18:39:07 +01:00
monit.conf added possibility to specify more precise default date pattern: 2016-10-17 11:18:30 +02:00
murmur.conf filter.d/murmur.conf: fixed detection of failures reading from journal (systemd-backend only): 2018-02-09 11:43:55 +01:00
mysqld-auth.conf filter.d/mysqld-auth.conf: ISO timestamp format (dual time) within log message 2019-10-11 01:31:07 +02:00
nagios.conf
named-refused.conf don't need to match identifier exactly (@ is precise enough as prefix), not capturing group; 2019-07-29 13:21:00 +02:00
nginx-botsearch.conf more precise date template handling (WARNING: this commit creates possible incompatibilities): 2016-10-17 11:20:27 +02:00
nginx-http-auth.conf Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10 2018-01-17 16:42:56 +01:00
nginx-limit-req.conf Merge remote-tracking branch 'master' into 0.10 2017-12-06 00:09:52 +01:00
nsd.conf more precise date template handling (WARNING: this commit creates possible incompatibilities): 2016-10-17 11:20:27 +02:00
openhab.conf added possibility to specify more precise default date pattern: 2016-10-17 11:18:30 +02:00
openwebmail.conf
oracleims.conf added possibility to specify more precise default date pattern: 2016-10-17 11:18:30 +02:00
pam-generic.conf quick optimization: normalizes pam-generic prefregex (more similar to the same regex within sshd-filter) + datepattern anchored now; 2018-03-20 16:00:21 +01:00
perdition.conf
php-url-fopen.conf more precise date template handling (WARNING: this commit creates possible incompatibilities): 2016-10-17 11:20:27 +02:00
phpmyadmin-syslog.conf phpmyadmin-syslog: removed excess file, fixed test, updated failregex 2017-08-23 16:56:18 +03:00
portsentry.conf more precise date template handling (WARNING: this commit creates possible incompatibilities): 2016-10-17 11:20:27 +02:00
postfix.conf filter.d/postfix.conf: extended with new postfix filter mode `errors` to match "too many errors" (gh-2439), 2019-06-07 16:14:02 +02:00
proftpd.conf Merge branch 'master' into 0.10 2017-07-03 12:43:48 +02:00
pure-ftpd.conf define journalmatch setting for pure-ftps 2016-03-11 18:19:53 +01:00
qmail.conf
recidive.conf filter.d/recidive.conf: fixed if logging into systemd-journal (SYSLOG) with daemon name in prefix, gh-2069 2018-03-09 13:56:38 +01:00
roundcube-auth.conf filter.d/roundcube-auth.conf: fixes failregex not working with `X-Real-IP` or/and `X-Forwarded-For` (gh-1303) 2017-07-11 14:59:24 +02:00
screensharingd.conf Removed old svn revision comment 2015-11-02 09:08:47 -08:00
selinux-common.conf added possibility to specify more precise default date pattern: 2016-10-17 11:18:30 +02:00
selinux-ssh.conf
sendmail-auth.conf Update sendmail-auth.conf 2018-04-04 18:52:35 +02:00
sendmail-reject.conf Merge pull request #2387 from sebres/logtype-option-journal 2019-04-18 13:27:42 +02:00
sieve.conf
slapd.conf another variant of regex 2016-07-14 10:19:21 +03:00
sogo-auth.conf Merge branch 'master-0.9' into 0.10 2019-03-12 16:58:08 +01:00
solid-pop3d.conf
squid.conf more precise date template handling (WARNING: this commit creates possible incompatibilities): 2016-10-17 11:20:27 +02:00
squirrelmail.conf added possibility to specify more precise default date pattern: 2016-10-17 11:18:30 +02:00
sshd.conf Merge pull request #2467 from sebres/logtype-option-rfc5424 2019-07-24 00:02:04 +02:00
stunnel.conf ENH: define ignoreregex for all filters explicitly, to avoid warnings (Closes #934) 2015-01-30 10:38:28 -05:00
suhosin.conf suhosin.conf: removed greedy match 2017-01-21 16:26:07 +01:00
tine20.conf more precise date template handling (WARNING: this commit creates possible incompatibilities): 2016-10-17 11:20:27 +02:00
traefik-auth.conf regex rewritten (more secure now, resolves catch-all vulni) 2019-02-21 22:19:04 +01:00
uwimap-auth.conf
vsftpd.conf filter.d/vsftpd.conf: optional reason message after FAIL LOGIN, closes #1543 2016-09-09 09:20:15 +02:00
webmin-auth.conf
wuftpd.conf Add filter variable __pam_auth to allow easier changing of pam auth backend 2015-01-27 14:34:27 -07:00
xinetd-fail.conf Several filters optimized with pre-filtering using new option `prefregex` 2017-02-21 15:54:59 +01:00
znc-adminlog.conf filter.d/znc-adminlog.conf: support logging format of systemd-journal, bypass port after address (optional, removed end-anchor, see gh-2520) 2019-09-10 21:02:26 +02:00
zoneminder.conf small review, prefix replaced with `%(_apache_error_client)s` from apache-common.conf include 2017-09-04 11:48:01 +02:00