From: <los...@us...> - 2008-10-13 14:37:39
|
Revision: 715 http://fail2ban.svn.sourceforge.net/fail2ban/?rev=715&view=rev Author: lostcontrol Date: 2008-10-13 14:37:25 +0000 (Mon, 13 Oct 2008) Log Message: ----------- - Added apache-nohome.conf. Thanks to Yaroslav Halchenko. Modified Paths: -------------- branches/FAIL2BAN-0_8/ChangeLog branches/FAIL2BAN-0_8/MANIFEST Added Paths: ----------- branches/FAIL2BAN-0_8/config/filter.d/apache-nohome.conf Modified: branches/FAIL2BAN-0_8/ChangeLog =================================================================== --- branches/FAIL2BAN-0_8/ChangeLog 2008-10-10 16:26:18 UTC (rev 714) +++ branches/FAIL2BAN-0_8/ChangeLog 2008-10-13 14:37:25 UTC (rev 715) @@ -17,6 +17,7 @@ - Try to match the regex even if the line does not contain a valid date/time. Described in Debian #491253. Thanks to Yaroslav Halchenko. +- Added/improved filters and date formats. ver. 0.8.3 (2008/07/17) - stable ---------- Modified: branches/FAIL2BAN-0_8/MANIFEST =================================================================== --- branches/FAIL2BAN-0_8/MANIFEST 2008-10-10 16:26:18 UTC (rev 714) +++ branches/FAIL2BAN-0_8/MANIFEST 2008-10-13 14:37:25 UTC (rev 715) @@ -59,6 +59,7 @@ config/filter.d/common.conf config/filter.d/apache-auth.conf config/filter.d/apache-badbots.conf +config/filter.d/apache-nohome.conf config/filter.d/apache-noscript.conf config/filter.d/apache-overflows.conf config/filter.d/courierlogin.conf Added: branches/FAIL2BAN-0_8/config/filter.d/apache-nohome.conf =================================================================== --- branches/FAIL2BAN-0_8/config/filter.d/apache-nohome.conf (rev 0) +++ branches/FAIL2BAN-0_8/config/filter.d/apache-nohome.conf 2008-10-13 14:37:25 UTC (rev 715) @@ -0,0 +1,23 @@ +# Fail2Ban configuration file +# +# Author: Yaroslav O. Halchenko <de...@on...> +# +# $Revision: 569 $ +# + +[Definition] + +# Option: failregex +# Notes.: regex to match failures to find a home directory on a server, which +# became popular last days. Most often attacker just uses IP instead of +# domain name -- so expect to see them in generic error.log if you have +# per-domain log files. +# Values: TEXT +# +failregex = [[]client <HOST>[]] File does not exist: .*/~.* + +# Option: ignoreregex +# Notes.: regex to ignore. If this regex matches, the line is ignored. +# Values: TEXT +# +ignoreregex = This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |