#15 Add section in fail2ban.conf for FTP

closed
Cyril Jaquier
None
5
2006-09-06
2006-02-08
Harry Rarig
No

Please add a section to fail2ban.conf that supports
the vsftpd FTP server and can correctly parse
the /var/log/vsftpd.log file.

The format used in /var/log/vsftpd.log is as follows:

Wed Feb 8 12:34:43 2006 [pid 10390] FTP command:
Client "XXX.XXX.XXX.XXX", "USER foobar"
Wed Feb 8 12:34:43 2006 [pid 10390] [foobar] FTP
response: Client "XXX.XXX.XXX.XXX", "530 Permission
denied."

Much tnx!

Harry

Discussion

  • Cyril Jaquier
    Cyril Jaquier
    2006-02-11

    Logged In: YES
    user_id=933467

    vsftpd support is available in CVS version. Will be in 0.6.1.

    Could you please test CVS version and report any issue?

    Thank you

     
  • Logged In: NO

    ...and for squid too, please. (The intranets are plagued by
    spyware). The /var/log/squid/access.log is as follows:

    1141089780.939 0 10.0.XX.XXX TCP_DENIED/407 1407 GET
    http://utils.winfixer.com/instlog/index.php? - NONE/- text/html

    Thank you!

     
  • Cyril Jaquier
    Cyril Jaquier
    2006-09-06

    Logged In: YES
    user_id=933467

    Please make a more detailed request about squid in a new ticket.

    Thank you

     
  • Cyril Jaquier
    Cyril Jaquier
    2006-09-06

    • status: open --> closed