You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

sebres bf689c27b8 filter.d/sshd.conf: `ddos` mode extended - recognizes messages "kex_exchange_identification: Connection closed / reset by pear" (fixed possible regression of f77398c49d); ... closes gh-3086		3 years ago
..
ignorecommands	filter.d/ignorecommands/apache-fakegooglebot: added timeout parameter (default 55 seconds) - avoid fail with timeout (default 1 minute) by reverse lookup on some slow DNS services (googlebots must be resolved fast);	4 years ago
3proxy.conf	added possibility to specify more precise default date pattern:	8 years ago
apache-auth.conf	filter.d/apache-auth.conf:	5 years ago
apache-badbots.conf	Merge remote-tracking branch 'upstream/master' into 0.10	7 years ago
apache-botsearch.conf	Merge branch 'master' into 0.10	7 years ago
apache-common.conf	filter.d/apache-auth.conf:	5 years ago
apache-fakegooglebot.conf	more precise date template handling (WARNING: this commit creates possible incompatibilities):	8 years ago
apache-modsecurity.conf	updated	6 years ago
apache-nohome.conf	…
apache-noscript.conf	filter.d/apache-noscript.conf: extended to match "script not found" with error AH02811 (and cgi-bin path segment in script)	4 years ago
apache-overflows.conf	filter.d/apache-overflows.conf: extended to match AH00126 error (Invalid URI ...);	4 years ago
apache-pass.conf	more precise date template handling (WARNING: this commit creates possible incompatibilities):	8 years ago
apache-shellshock.conf	Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10	7 years ago
assp.conf	Merge branch '0.9-fix-regex-using-journal' into 0.10-fix-regex-using-journal (merge point against 0.9 after back-porting gh-1660 from 0.10)	8 years ago
asterisk.conf	filter.d/asterisk.conf: relaxing protocol RE-part before IP in RemoteAddress (gh-2531)	5 years ago
bitwarden.conf	review and small tweaks (more precise and safe RE)	4 years ago
botsearch-common.conf	Update botsearch-common.conf (#1759)	8 years ago
centreon.conf	Add Centreon jail	5 years ago
common.conf	filter.d/common.conf: closes gh-2650, avoid substitute of default values in related `lt_*` section, `__prefix_line` should be interpolated in definition section (after the config considers all sections that can overwrite it);	5 years ago
counter-strike.conf	added possibility to specify more precise default date pattern:	8 years ago
courier-auth.conf	Make courier-auth regexp a non-captured group	8 years ago
courier-smtp.conf	filter.d/courier-smtp.conf: prefregex extended to consider port in log-message (closes gh-2697)	5 years ago
cyrus-imap.conf	filter.d/cyrus-imap.conf: fixed `failregex` - accept entries without login-info resp. hostname before IP address	8 years ago
directadmin.conf	added possibility to specify more precise default date pattern:	8 years ago
domino-smtp.conf	filter.d/domino-smtp.conf:	6 years ago
dovecot.conf	filter.d/dovecot.conf: extended to match prefix like `conn unix:auth-worker (uid=143): auth-worker<13247>:` (authenticate from external service like exim), gh-2553	4 years ago
dropbear.conf	Several filters optimized with pre-filtering using new option `prefregex`	8 years ago
drupal-auth.conf	…
ejabberd-auth.conf	small amend to gh-1850: removed greedy catch-all at end.	7 years ago
exim-common.conf	filter.d\exim-common.conf: pid-prefix extended to match `mx1 exim[...]:` (gh-2553)	4 years ago
exim-spam.conf	…
exim.conf	filter.d/exim.conf: failregex extended with SMTP call dropped: too many syntax or protocol errors.	7 years ago
freeswitch.conf	filter.d/freeswitch.conf: provide mode parameter, allows to avoid matching of messages like `auth challenge (REGISTER)` (see gh-2163) (currently `extra` as default to be backwards-compatible), see comments in filter how to set it to mode `normal`.	6 years ago
froxlor-auth.conf	Several filters optimized with pre-filtering using new option `prefregex`	8 years ago
gitlab.conf	New Gitlab jail	5 years ago
grafana.conf	no catch-alls, user name and error message stored in ticket	4 years ago
groupoffice.conf	…
gssftpd.conf	…
guacamole.conf	Enhance Guacamole jail	4 years ago
haproxy-http-auth.conf	Update haproxy-http-auth.conf	8 years ago
horde.conf	…
kerio.conf	Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10	8 years ago
lighttpd-auth.conf	filter.d/lighttpd-auth.conf: adjusted to the current source code + avoiding catch-all's, etc (gh-3116)	3 years ago
mongodb-auth.conf	code review, makes the test cases workable, added dev-notes	8 years ago
monit.conf	filter.d/common.conf: closes gh-2650, avoid substitute of default values in related `lt_*` section, `__prefix_line` should be interpolated in definition section (after the config considers all sections that can overwrite it);	5 years ago
murmur.conf	filter.d/murmur.conf: fixed detection of failures reading from journal (systemd-backend only):	7 years ago
mysqld-auth.conf	filter.d/mysqld-auth.conf: capture user name in filter (can be more strict if user switched, used in action or fail2ban-regex output);	5 years ago
nagios.conf	…
named-refused.conf	filter.d/named-refused.conf: fixes prefix for messages from systemd journal (no mandatory space ahead, because don't have timestamp)	4 years ago
nginx-botsearch.conf	more precise date template handling (WARNING: this commit creates possible incompatibilities):	8 years ago
nginx-http-auth.conf	Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10	7 years ago
nginx-limit-req.conf	Merge remote-tracking branch 'master' into 0.10	7 years ago
nsd.conf	more precise date template handling (WARNING: this commit creates possible incompatibilities):	8 years ago
openhab.conf	added possibility to specify more precise default date pattern:	8 years ago
openwebmail.conf	…
oracleims.conf	added possibility to specify more precise default date pattern:	8 years ago
pam-generic.conf	quick optimization: normalizes pam-generic prefregex (more similar to the same regex within sshd-filter) + datepattern anchored now;	7 years ago
perdition.conf	…
php-url-fopen.conf	more precise date template handling (WARNING: this commit creates possible incompatibilities):	8 years ago
phpmyadmin-syslog.conf	typo	4 years ago
portsentry.conf	more precise date template handling (WARNING: this commit creates possible incompatibilities):	8 years ago
postfix.conf	filter.d/postfix.conf: extended to cover new vectors:	4 years ago
proftpd.conf	typo	4 years ago
pure-ftpd.conf	…
qmail.conf	…
recidive.conf	filter.d/recidive.conf: fixed if logging into systemd-journal (SYSLOG) with daemon name in prefix, gh-2069	7 years ago
roundcube-auth.conf	filter.d/roundcube-auth.conf: fixes failregex not working with `X-Real-IP` or/and `X-Forwarded-For` (gh-1303)	7 years ago
screensharingd.conf	…
selinux-common.conf	added possibility to specify more precise default date pattern:	8 years ago
selinux-ssh.conf	…
sendmail-auth.conf	filter.d/sendmail-auth.conf: covering several "authentication failure" messages, sendmail 8.16.1 (gh-2757)	4 years ago
sendmail-reject.conf	filter.d/sendmail-reject.conf: fix reverse DNS for ... (gh-3012)	4 years ago
sieve.conf	…
slapd.conf	another variant of regex	9 years ago
softethervpn.conf	small tweaks (both 2nd time and facility are optional, avoid catch-all, etc)	4 years ago
sogo-auth.conf	Merge branch 'master-0.9' into 0.10	6 years ago
solid-pop3d.conf	…
squid.conf	more precise date template handling (WARNING: this commit creates possible incompatibilities):	8 years ago
squirrelmail.conf	added possibility to specify more precise default date pattern:	8 years ago
sshd.conf	filter.d/sshd.conf: `ddos` mode extended - recognizes messages "kex_exchange_identification: Connection closed / reset by pear" (fixed possible regression of f77398c49d);	3 years ago
stunnel.conf	…
suhosin.conf	suhosin.conf: removed greedy match	8 years ago
tine20.conf	more precise date template handling (WARNING: this commit creates possible incompatibilities):	8 years ago
traefik-auth.conf	filter.d/traefik-auth.conf: filter extended with parameter mode (`normal`, `ddos`, `aggressive`) to handle the match of username differently:	5 years ago
uwimap-auth.conf	…
vsftpd.conf	filter.d/vsftpd.conf: optional reason message after FAIL LOGIN, closes #1543	8 years ago
webmin-auth.conf	…
wuftpd.conf	…
xinetd-fail.conf	Several filters optimized with pre-filtering using new option `prefregex`	8 years ago
znc-adminlog.conf	filter.d/znc-adminlog.conf: support logging format of systemd-journal, bypass port after address (optional, removed end-anchor, see gh-2520)	5 years ago
zoneminder.conf	small review, prefix replaced with `%(_apache_error_client)s` from apache-common.conf include	7 years ago