From: <los...@us...> - 2008-10-10 16:00:25
|
Revision: 713 http://fail2ban.svn.sourceforge.net/fail2ban/?rev=713&view=rev Author: lostcontrol Date: 2008-10-10 16:00:10 +0000 (Fri, 10 Oct 2008) Log Message: ----------- - Added new regex. Thanks to Tobias Offermann. Modified Paths: -------------- branches/FAIL2BAN-0_8/config/filter.d/sshd.conf Modified: branches/FAIL2BAN-0_8/config/filter.d/sshd.conf =================================================================== --- branches/FAIL2BAN-0_8/config/filter.d/sshd.conf 2008-08-12 22:40:07 UTC (rev 712) +++ branches/FAIL2BAN-0_8/config/filter.d/sshd.conf 2008-10-10 16:00:10 UTC (rev 713) @@ -32,6 +32,7 @@ ^%(__prefix_line)sauthentication failure; logname=\S* uid=\S* euid=\S* tty=\S* ruser=\S* rhost=<HOST>(?:\s+user=.*)?\s*$ ^%(__prefix_line)srefused connect from \S+ \(<HOST>\)\s*$ ^%(__prefix_line)sAddress <HOST> .* POSSIBLE BREAK-IN ATTEMPT\s*$ + ^%(__prefix_line)sUser \S+ from <HOST> not allowed because none of user's groups are listed in AllowGroups$ # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored. This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |