github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity
fail2ban/config/filter.d
History
jamesstout d2a9537568 ENH: extra daemon info regex 
for matching log lines like:
Mar 29 05:20:09 dusky sshd[19558]: [ID 800047 auth.info] Failed
keyboard-interactive for james from 205.186.180.30 port 54520 ssh2

this matches  [ID 800047 auth.info]
 		2013-04-30 04:14:36 +08:00
..
apache-auth.conf - Changed <HOST> template to be more restrictive. Debian bug #514163. 2009-02-08 17:31:24 +00:00
apache-badbots.conf Fixed typos 2013-03-10 22:05:33 +00:00
apache-nohome.conf - Added svn:keywords property. 2008-10-13 14:38:41 +00:00
apache-noscript.conf - Changed <HOST> template to be more restrictive. Debian bug #514163. 2009-02-08 17:31:24 +00:00
apache-overflows.conf ENH: make filter.d/apache-overflows.conf catch more: see http://bugs.debian.org/574182 2011-03-23 20:36:17 +00:00
asterisk.conf Add the INCLUDE section to use __pid_re feature 2012-02-28 17:28:06 +01:00
common.conf ENH: extra daemon info regex 2013-04-30 04:14:36 +08:00
courierlogin.conf - Changed <HOST> template to be more restrictive. Debian bug #514163. 2009-02-08 17:31:24 +00:00
couriersmtp.conf - Changed <HOST> template to be more restrictive. Debian bug #514163. 2009-02-08 17:31:24 +00:00
cyrus-imap.conf - Changed <HOST> template to be more restrictive. Debian bug #514163. 2009-02-08 17:31:24 +00:00
dovecot.conf ENH: dovecot.conf - require space(s) before rip/rhost log entry 2012-12-12 09:16:52 -05:00
dropbear.conf ENH: dropbear filter: see http://bugs.debian.org/546913 2011-03-23 20:36:08 +00:00
exim.conf ENH: Added login authenticator failed regexp for exim filter 2013-01-04 15:23:05 -05:00
gssftpd.conf - Added missing ignoreregex to filters. Thanks to Klaus Lehmann. 2008-05-21 22:17:00 +00:00
lighttpd-auth.conf ENH: join both failregex for lighttpd-auth into a single one 2012-09-30 11:30:24 -04:00
lighttpd-fastcgi.conf added two new filter files (PHP url_fopen, lighttpd fastcgi alerts), updated MANIFEST and jail.conf accordingly 2009-08-30 14:17:29 +00:00
mysqld-auth.conf ENH: for consistency (and future expansion ;)) -- rename to mysqld-auth 2013-04-09 18:03:34 -04:00
named-refused.conf - Made the named-refused regex a bit less restrictive in order to match logs with "view". Thanks to Stephen Gildea. 2009-02-09 20:27:35 +00:00
pam-generic.conf ENH: removed expansion for few Date and Revision SVN keywords 2011-11-18 10:14:39 -05:00
php-url-fopen.conf added two new filter files (PHP url_fopen, lighttpd fastcgi alerts), updated MANIFEST and jail.conf accordingly 2009-08-30 14:17:29 +00:00
postfix.conf ENH: postfix filter -- react also on (450 4.7.1) with empty from/to. fixes #126 2013-03-26 09:40:04 -04:00
proftpd.conf BF: proftpd filter -- if login failed -- count regardless of the reason for failure 2011-03-23 20:37:19 +00:00
pure-ftpd.conf ENH: removed expansion for few Date and Revision SVN keywords 2011-11-18 10:14:39 -05:00
qmail.conf - Changed <HOST> template to be more restrictive. Debian bug #514163. 2009-02-08 17:31:24 +00:00
recidive.conf ENH: moved jail definition for recidive into jail.conf + swapped/commented durations + non-groupping ?: 2012-01-26 23:28:44 -05:00
roundcube-auth.conf NF: roundcube-auth filter (to close Debian #699442, needing debian/jail.conf section) 2013-01-31 14:41:34 -05:00
sasl.conf BF: Allow for trailing spaces in sasl logs 2011-08-07 02:41:08 +00:00
sieve.conf - Added cyrus-imap and sieve filters. Thanks to Jan Wagner. Debian bug #513953. 2009-02-03 22:37:46 +00:00
sogo-auth.conf ENH: Slight tune ups for fresh SOGo filter + comment into the sample log file 2013-03-27 11:09:54 -04:00
sshd-ddos.conf ENH: tune up sshd-ddos to use common.conf and allow training spaces 2012-12-07 15:24:34 -05:00
sshd.conf Extra patterns for Solaris 2013-04-21 07:30:21 +08:00
vsftpd.conf - Changed <HOST> template to be more restrictive. Debian bug #514163. 2009-02-08 17:31:24 +00:00
webmin-auth.conf Update config/filter.d/webmin-auth.conf 2012-12-13 08:14:49 +01:00
wuftpd.conf ENH: add wu-ftpd failregex for use against syslog (Closes: #514239) 2012-07-31 15:43:13 -04:00
xinetd-fail.conf - Changed <HOST> template to be more restrictive. Debian bug #514163. 2009-02-08 17:31:24 +00:00