From 155c4652a42b980003c2bbf23a466099d56c8d05 Mon Sep 17 00:00:00 2001 From: Cyril Jaquier Date: Tue, 22 Jul 2008 22:29:57 +0000 Subject: [PATCH] - Merged patches from Debian package. Thanks to Yaroslav Halchenko. git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@706 a942ae1a-1317-0410-a47c-b1dcaea8d605 --- ChangeLog | 2 ++ config/filter.d/sshd.conf | 3 ++- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index a80e610a..c748972e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -9,6 +9,8 @@ Fail2Ban (version 0.8.4) 2008/??/?? ver. 0.8.4 (2008/??/??) - stable ---------- +- Merged patches from Debian package. Thanks to Yaroslav + Halchenko. ver. 0.8.3 (2008/07/17) - stable ---------- diff --git a/config/filter.d/sshd.conf b/config/filter.d/sshd.conf index 9a7c851a..642f2bf7 100644 --- a/config/filter.d/sshd.conf +++ b/config/filter.d/sshd.conf @@ -24,7 +24,8 @@ _daemon = sshd # Values: TEXT # failregex = ^%(__prefix_line)s(?:error: PAM: )?Authentication failure for .* from \s*$ - ^%(__prefix_line)sFailed [-/\w]+ for .* from (?: port \d*)?(?: ssh\d*)?$ + ^%(__prefix_line)s(?:error: PAM: )?User not known to the underlying authentication module for .* from \s*$ + ^%(__prefix_line)sFailed (?:password|publickey) for .* from (?: port \d*)?(?: ssh\d*)?$ ^%(__prefix_line)sROOT LOGIN REFUSED.* FROM \s*$ ^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from \s*$ ^%(__prefix_line)sUser \S+ from not allowed because not listed in AllowUsers$