From: <los...@us...> - 2006-12-18 22:35:34
|
Revision: 495 http://svn.sourceforge.net/fail2ban/?rev=495&view=rev Author: lostcontrol Date: 2006-12-18 14:35:34 -0800 (Mon, 18 Dec 2006) Log Message: ----------- - Fixed some comments Modified Paths: -------------- trunk/config/filter.d/apache-auth.conf trunk/config/filter.d/apache-noscript.conf trunk/config/filter.d/courierlogin.conf trunk/config/filter.d/couriersmtp.conf trunk/config/filter.d/postfix.conf trunk/config/filter.d/proftpd.conf trunk/config/filter.d/qmail.conf trunk/config/filter.d/sasl.conf trunk/config/filter.d/sshd.conf trunk/config/filter.d/vsftpd.conf Modified: trunk/config/filter.d/apache-auth.conf =================================================================== --- trunk/config/filter.d/apache-auth.conf 2006-12-18 22:33:01 UTC (rev 494) +++ trunk/config/filter.d/apache-auth.conf 2006-12-18 22:35:34 UTC (rev 495) @@ -10,7 +10,8 @@ # Option: failregex # Notes.: regex to match the password failure messages in the logfile. The # host must be matched by a group named "host". The tag "<HOST>" can -# be used for standard IP/hostname matching. +# be used for standard IP/hostname matching and is only an alias for +# (?:::f{4,6}:)?(?P<host>\S+) # Values: TEXT # failregex = [[]client <HOST>[]] user .*(?:: authentication failure|not found) Modified: trunk/config/filter.d/apache-noscript.conf =================================================================== --- trunk/config/filter.d/apache-noscript.conf 2006-12-18 22:33:01 UTC (rev 494) +++ trunk/config/filter.d/apache-noscript.conf 2006-12-18 22:35:34 UTC (rev 495) @@ -10,7 +10,8 @@ # Option: failregex # Notes.: regex to match the password failure messages in the logfile. The # host must be matched by a group named "host". The tag "<HOST>" can -# be used for standard IP/hostname matching. +# be used for standard IP/hostname matching and is only an alias for +# (?:::f{4,6}:)?(?P<host>\S+) # Values: TEXT # failregex = [[]client <HOST>[]] File does not exist: .*(\.php|\.asp) Modified: trunk/config/filter.d/courierlogin.conf =================================================================== --- trunk/config/filter.d/courierlogin.conf 2006-12-18 22:33:01 UTC (rev 494) +++ trunk/config/filter.d/courierlogin.conf 2006-12-18 22:35:34 UTC (rev 495) @@ -11,7 +11,8 @@ # Option: failregex # Notes.: regex to match the password failures messages in the logfile. The # host must be matched by a group named "host". The tag "<HOST>" can -# be used for standard IP/hostname matching. +# be used for standard IP/hostname matching and is only an alias for +# (?:::f{4,6}:)?(?P<host>\S+) # Values: TEXT # failregex = LOGIN FAILED, ip=\[<HOST>\]$ Modified: trunk/config/filter.d/couriersmtp.conf =================================================================== --- trunk/config/filter.d/couriersmtp.conf 2006-12-18 22:33:01 UTC (rev 494) +++ trunk/config/filter.d/couriersmtp.conf 2006-12-18 22:35:34 UTC (rev 495) @@ -10,7 +10,8 @@ # Option: failregex # Notes.: regex to match the password failures messages in the logfile. The # host must be matched by a group named "host". The tag "<HOST>" can -# be used for standard IP/hostname matching. +# be used for standard IP/hostname matching and is only an alias for +# (?:::f{4,6}:)?(?P<host>\S+) # Values: TEXT # failregex = error,relay=<HOST>,.*550 User unknown Modified: trunk/config/filter.d/postfix.conf =================================================================== --- trunk/config/filter.d/postfix.conf 2006-12-18 22:33:01 UTC (rev 494) +++ trunk/config/filter.d/postfix.conf 2006-12-18 22:35:34 UTC (rev 495) @@ -10,7 +10,8 @@ # Option: failregex # Notes.: regex to match the password failures messages in the logfile. The # host must be matched by a group named "host". The tag "<HOST>" can -# be used for standard IP/hostname matching. +# be used for standard IP/hostname matching and is only an alias for +# (?:::f{4,6}:)?(?P<host>\S+) # Values: TEXT # failregex = reject: RCPT from (.*)\[<HOST>\]: 554 Modified: trunk/config/filter.d/proftpd.conf =================================================================== --- trunk/config/filter.d/proftpd.conf 2006-12-18 22:33:01 UTC (rev 494) +++ trunk/config/filter.d/proftpd.conf 2006-12-18 22:35:34 UTC (rev 495) @@ -10,7 +10,8 @@ # Option: failregex # Notes.: regex to match the password failures messages in the logfile. The # host must be matched by a group named "host". The tag "<HOST>" can -# be used for standard IP/hostname matching. +# be used for standard IP/hostname matching and is only an alias for +# (?:::f{4,6}:)?(?P<host>\S+) # Values: TEXT # failregex = USER \S+: no such user found from \S* ?\[<HOST>\] to \S+\s*$ Modified: trunk/config/filter.d/qmail.conf =================================================================== --- trunk/config/filter.d/qmail.conf 2006-12-18 22:33:01 UTC (rev 494) +++ trunk/config/filter.d/qmail.conf 2006-12-18 22:35:34 UTC (rev 495) @@ -10,7 +10,8 @@ # Option: failregex # Notes.: regex to match the password failures messages in the logfile. The # host must be matched by a group named "host". The tag "<HOST>" can -# be used for standard IP/hostname matching. +# be used for standard IP/hostname matching and is only an alias for +# (?:::f{4,6}:)?(?P<host>\S+) # Values: TEXT # failregex = (?:[\d,.]+[\d,.] rblsmtpd: |421 badiprbl: ip )<HOST> Modified: trunk/config/filter.d/sasl.conf =================================================================== --- trunk/config/filter.d/sasl.conf 2006-12-18 22:33:01 UTC (rev 494) +++ trunk/config/filter.d/sasl.conf 2006-12-18 22:35:34 UTC (rev 495) @@ -10,7 +10,8 @@ # Option: failregex # Notes.: regex to match the password failures messages in the logfile. The # host must be matched by a group named "host". The tag "<HOST>" can -# be used for standard IP/hostname matching. +# be used for standard IP/hostname matching and is only an alias for +# (?:::f{4,6}:)?(?P<host>\S+) # Values: TEXT # failregex = : warning: [-._\w]+\[<HOST>\]: SASL (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed$ Modified: trunk/config/filter.d/sshd.conf =================================================================== --- trunk/config/filter.d/sshd.conf 2006-12-18 22:33:01 UTC (rev 494) +++ trunk/config/filter.d/sshd.conf 2006-12-18 22:35:34 UTC (rev 495) @@ -10,7 +10,8 @@ # Option: failregex # Notes.: regex to match the password failures messages in the logfile. The # host must be matched by a group named "host". The tag "<HOST>" can -# be used for standard IP/hostname matching. +# be used for standard IP/hostname matching and is only an alias for +# (?:::f{4,6}:)?(?P<host>\S+) # Values: TEXT # failregex = (?:(?:Authentication failure|Failed [-/\w+]+) for(?: [iI](?:llegal|nvalid) user)?|[Ii](?:llegal|nvalid) user|ROOT LOGIN REFUSED) .*(?: from|FROM) <HOST> Modified: trunk/config/filter.d/vsftpd.conf =================================================================== --- trunk/config/filter.d/vsftpd.conf 2006-12-18 22:33:01 UTC (rev 494) +++ trunk/config/filter.d/vsftpd.conf 2006-12-18 22:35:34 UTC (rev 495) @@ -10,7 +10,8 @@ # Option: failregex # Notes.: regex to match the password failures messages in the logfile. The # host must be matched by a group named "host". The tag "<HOST>" can -# be used for standard IP/hostname matching. +# be used for standard IP/hostname matching and is only an alias for +# (?:::f{4,6}:)?(?P<host>\S+) # Values: TEXT # failregex = vsftpd: \(pam_unix\) authentication failure; .* rhost=<HOST> This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |