You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
fail2ban/config/filter.d
Daniel Black de9977441a
DOC: move named and mysql instructions into the filters from jail.conf
11 years ago
..
3proxy.conf ENH: sample log + more specific regex 12 years ago
apache-auth.conf RF: do not catch for now "invalid nonce \S* received - hash is not \S*" -- imho needs more analysis 11 years ago
apache-badbots.conf DOC: purge of svn tags 12 years ago
apache-common.conf BF: duplicate regex match fixed 11 years ago
apache-nohome.conf BF: duplicate regex match fixed 11 years ago
apache-noscript.conf BF: anchor apache- filters. Close #248 12 years ago
apache-overflows.conf BF: anchor apache- filters. Close #248 12 years ago
assp.conf BF: missed a space 12 years ago
asterisk.conf fail2ban-users: Sebastian Arcus - Detect device auth failures on Asterisk 11 12 years ago
common.conf DOC/ENH: __md5hex regex defination to common.conf. Document debian bug # 11 years ago
courierlogin.conf ENH: Improve courierlogin regex and add sample logs 12 years ago
couriersmtp.conf ENH: Improve couriersmtp and add sample logs 12 years ago
cyrus-imap.conf ENH: Simplify cyrus-imap filter fail regex 12 years ago
dovecot.conf ENH: additional tweek to dovecot regex based on http://chrisgilligan.com/portfolio/fail2ban-regex/ 11 years ago
dropbear.conf ENH: hardened added dropbear failregex to avoid trailing .* and enclose username in '' 11 years ago
exim-common.conf ENH: split out exim-spam into speparate filter 12 years ago
exim-spam.conf ENH: split out exim-spam into speparate filter 12 years ago
exim.conf ENH: filter.d/exim.conf - add authentication failures for "plain" authentication 11 years ago
gssftpd.conf ENH: filter gssftpd is a syslog based service so anchor it using syslog prefix 11 years ago
lighttpd-auth.conf ENH: further tighten lighttpd basic auth regex 11 years ago
mysqld-auth.conf DOC: move named and mysql instructions into the filters from jail.conf 11 years ago
named-refused.conf DOC: move named and mysql instructions into the filters from jail.conf 11 years ago
pam-generic.conf ENH: added syslog prefix to pam-generic filter. Disable regex match for pre 2006 (< 0.99.2.0) versions on linux-pam 11 years ago
perdition.conf ENH: authentication_id can be an imap4 quoted string, whatever that is, so using .+ as its id 12 years ago
php-url-fopen.conf added two new filter files (PHP url_fopen, lighttpd fastcgi alerts), updated MANIFEST and jail.conf accordingly 15 years ago
postfix-sasl.conf ENH: rename filter.d/sasl -> filter.d/postfix-sasl 11 years ago
postfix.conf ENH: filter.d/postfix - add filter for VRFY. Closes gh-322 11 years ago
proftpd.conf BF: fix daemon name typo for filter proftpd 11 years ago
pure-ftpd.conf TST: pureftpd - syslog therefore use syslog prefixes in filter 11 years ago
qmail.conf ENH: filter.d/qmail - anchor at start. Add another regex for http://www.tjsi.com/rblsmtpd/faq/ patch to rblsmtpd 11 years ago
recidive.conf ENH: filter.d/recidive - replace ignore regex with a negative lookahead assertion 11 years ago
roundcube-auth.conf BF: filter.d/routecube-auth - time offset can be positive or negative 11 years ago
selinux-common.conf BF: fix selinux 11 years ago
selinux-ssh.conf BF: fix selinux 11 years ago
sieve.conf ENH: Simplify sieve filter failregex 12 years ago
sogo-auth.conf ENH: filter.d/sogo-auth - anchor regex at start 11 years ago
sshd-ddos.conf BF: filter.d/sshd "Did not receive identification string" relates to an exploit so document this in sshd-ddos.conf but leave it out of authentication based blocks in sshd.conf 12 years ago
sshd.conf DOC/ENH: __md5hex regex defination to common.conf. Document debian bug # 11 years ago
suhosin.conf ENH: filter.d/suhosin - anchor regex at start 11 years ago
uwimap-auth.conf ENH: filter.d/uwimap-auth - failure of an admin override to regex 11 years ago
vsftpd.conf FIX: vsftp improvements from Rich Mellor on mailing list 11 years ago
webmin-auth.conf ENH: filter.d/webmin anchor at start and use syslog 11 years ago
wuftpd.conf ENH: trailing space as per discussion on gh-303 11 years ago
xinetd-fail.conf ENH: Improve xinetd-fail regex and add sample logs 12 years ago