From: <los...@us...> - 2007-01-04 12:21:45
|
Revision: 510 http://svn.sourceforge.net/fail2ban/?rev=510&view=rev Author: lostcontrol Date: 2007-01-04 04:21:44 -0800 (Thu, 04 Jan 2007) Log Message: ----------- - Added missing svn:keywords - Split failregex in sshd.conf - Added sshd-ddos.conf. Thanks to Yaroslav Halchenko Modified Paths: -------------- trunk/config/action.d/ipfw.conf trunk/config/action.d/mail-whois.conf trunk/config/action.d/mail.conf trunk/config/action.d/shorewall.conf trunk/config/filter.d/apache-noscript.conf trunk/config/filter.d/courierlogin.conf trunk/config/filter.d/couriersmtp.conf trunk/config/filter.d/exim.conf trunk/config/filter.d/postfix.conf trunk/config/filter.d/proftpd.conf trunk/config/filter.d/qmail.conf trunk/config/filter.d/sasl.conf trunk/config/filter.d/sshd.conf Added Paths: ----------- trunk/config/filter.d/sshd-ddos.conf Property Changed: ---------------- trunk/config/action.d/ipfw.conf trunk/config/action.d/mail-whois.conf trunk/config/action.d/mail.conf trunk/config/action.d/shorewall.conf trunk/config/filter.d/apache-noscript.conf trunk/config/filter.d/courierlogin.conf trunk/config/filter.d/couriersmtp.conf trunk/config/filter.d/exim.conf trunk/config/filter.d/postfix.conf trunk/config/filter.d/proftpd.conf trunk/config/filter.d/qmail.conf trunk/config/filter.d/sasl.conf Modified: trunk/config/action.d/ipfw.conf =================================================================== --- trunk/config/action.d/ipfw.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/action.d/ipfw.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -3,7 +3,7 @@ # Author: Nick Munger # Modified by: Cyril Jaquier # -# $Revision: 254 $ +# $Revision$ # [Definition] Property changes on: trunk/config/action.d/ipfw.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Modified: trunk/config/action.d/mail-whois.conf =================================================================== --- trunk/config/action.d/mail-whois.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/action.d/mail-whois.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -2,7 +2,7 @@ # # Author: Cyril Jaquier # -# $Revision: 254 $ +# $Revision$ # [Definition] Property changes on: trunk/config/action.d/mail-whois.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Modified: trunk/config/action.d/mail.conf =================================================================== --- trunk/config/action.d/mail.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/action.d/mail.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -2,7 +2,7 @@ # # Author: Cyril Jaquier # -# $Revision: 254 $ +# $Revision$ # [Definition] Property changes on: trunk/config/action.d/mail.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Modified: trunk/config/action.d/shorewall.conf =================================================================== --- trunk/config/action.d/shorewall.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/action.d/shorewall.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -2,7 +2,7 @@ # # Author: Cyril Jaquier # -# $Revision: 394 $ +# $Revision$ # [Definition] Property changes on: trunk/config/action.d/shorewall.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Modified: trunk/config/filter.d/apache-noscript.conf =================================================================== --- trunk/config/filter.d/apache-noscript.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/filter.d/apache-noscript.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -2,7 +2,7 @@ # # Author: Cyril Jaquier # -# $Revision: 394 $ +# $Revision$ # [Definition] Property changes on: trunk/config/filter.d/apache-noscript.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Modified: trunk/config/filter.d/courierlogin.conf =================================================================== --- trunk/config/filter.d/courierlogin.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/filter.d/courierlogin.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -3,7 +3,7 @@ # Author: Christoph Haas # Modified by: Cyril Jaquier # -# $Revision: 267 $ +# $Revision$ # [Definition] Property changes on: trunk/config/filter.d/courierlogin.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Modified: trunk/config/filter.d/couriersmtp.conf =================================================================== --- trunk/config/filter.d/couriersmtp.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/filter.d/couriersmtp.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -2,7 +2,7 @@ # # Author: Cyril Jaquier # -# $Revision: 267 $ +# $Revision$ # [Definition] Property changes on: trunk/config/filter.d/couriersmtp.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Modified: trunk/config/filter.d/exim.conf =================================================================== --- trunk/config/filter.d/exim.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/filter.d/exim.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -2,7 +2,7 @@ # # Author: Cyril Jaquier # -# $Revision: 267 $ +# $Revision$ # [Definition] Property changes on: trunk/config/filter.d/exim.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Modified: trunk/config/filter.d/postfix.conf =================================================================== --- trunk/config/filter.d/postfix.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/filter.d/postfix.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -2,7 +2,7 @@ # # Author: Cyril Jaquier # -# $Revision: 267 $ +# $Revision$ # [Definition] Property changes on: trunk/config/filter.d/postfix.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Modified: trunk/config/filter.d/proftpd.conf =================================================================== --- trunk/config/filter.d/proftpd.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/filter.d/proftpd.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -2,7 +2,7 @@ # # Author: Yaroslav Halchenko # -# $Revision: 331 $ +# $Revision$ # [Definition] Property changes on: trunk/config/filter.d/proftpd.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Modified: trunk/config/filter.d/qmail.conf =================================================================== --- trunk/config/filter.d/qmail.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/filter.d/qmail.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -2,7 +2,7 @@ # # Author: Cyril Jaquier # -# $Revision: 267 $ +# $Revision$ # [Definition] Property changes on: trunk/config/filter.d/qmail.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Modified: trunk/config/filter.d/sasl.conf =================================================================== --- trunk/config/filter.d/sasl.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/filter.d/sasl.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -2,7 +2,7 @@ # # Author: Yaroslav Halchenko # -# $Revision: 331 $ +# $Revision$ # [Definition] Property changes on: trunk/config/filter.d/sasl.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Added: trunk/config/filter.d/sshd-ddos.conf =================================================================== --- trunk/config/filter.d/sshd-ddos.conf (rev 0) +++ trunk/config/filter.d/sshd-ddos.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -0,0 +1,23 @@ +# Fail2Ban configuration file +# +# Author: Yaroslav Halchenko +# +# $Revision$ +# + +[Definition] + +# Option: failregex +# Notes.: regex to match the password failures messages in the logfile. The +# host must be matched by a group named "host". The tag "<HOST>" can +# be used for standard IP/hostname matching and is only an alias for +# (?:::f{4,6}:)?(?P<host>\S+) +# Values: TEXT +# +failregex = sshd\[\S*\]: Did not receive identification string from <HOST> + +# Option: ignoreregex +# Notes.: regex to ignore. If this regex matches, the line is ignored. +# Values: TEXT +# +ignoreregex = Property changes on: trunk/config/filter.d/sshd-ddos.conf ___________________________________________________________________ Name: svn:keywords + Author Date Id Revision Modified: trunk/config/filter.d/sshd.conf =================================================================== --- trunk/config/filter.d/sshd.conf 2007-01-04 11:58:58 UTC (rev 509) +++ trunk/config/filter.d/sshd.conf 2007-01-04 12:21:44 UTC (rev 510) @@ -14,7 +14,8 @@ # (?:::f{4,6}:)?(?P<host>\S+) # Values: TEXT # -failregex = (?:(?:Authentication failure|Failed [-/\w+]+) for(?: [iI](?:llegal|nvalid) user)?|[Ii](?:llegal|nvalid) user|ROOT LOGIN REFUSED) .*(?: from|FROM) <HOST> +failregex = (?:Authentication failure|Failed [-/\w+]+) for(?: [iI](?:llegal|nvalid))? user .*(?: from|FROM) <HOST> + ROOT LOGIN REFUSED .*(?: from|FROM) <HOST> # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored. This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |