From 27d4baeb55714e481113f1864251a7da8fd4f3db Mon Sep 17 00:00:00 2001 From: Yaroslav Halchenko Date: Fri, 4 Jan 2008 12:11:47 -0500 Subject: [PATCH] BF: optional user= at the end for vsftpd. NOTE: given failregex would work only for etch shipped vsftpd/pam --- debian/patches/00_stronger_failregex.dpatch | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/debian/patches/00_stronger_failregex.dpatch b/debian/patches/00_stronger_failregex.dpatch index 4a6b0478..da6f1a0c 100755 --- a/debian/patches/00_stronger_failregex.dpatch +++ b/debian/patches/00_stronger_failregex.dpatch @@ -6,8 +6,8 @@ @DPATCH@ diff -urNad fail2ban~/config/filter.d/sshd.conf fail2ban/config/filter.d/sshd.conf ---- fail2ban~/config/filter.d/sshd.conf 2008-01-04 11:42:10.000000000 -0500 -+++ fail2ban/config/filter.d/sshd.conf 2008-01-04 11:44:39.000000000 -0500 +--- fail2ban~/config/filter.d/sshd.conf 2008-01-04 12:02:47.000000000 -0500 ++++ fail2ban/config/filter.d/sshd.conf 2008-01-04 12:10:25.000000000 -0500 @@ -13,7 +13,7 @@ # be used for standard IP/hostname matching. # Values: TEXT @@ -18,14 +18,14 @@ diff -urNad fail2ban~/config/filter.d/sshd.conf fail2ban/config/filter.d/sshd.co # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored. diff -urNad fail2ban~/config/filter.d/vsftpd.conf fail2ban/config/filter.d/vsftpd.conf ---- fail2ban~/config/filter.d/vsftpd.conf 2008-01-04 11:42:10.000000000 -0500 -+++ fail2ban/config/filter.d/vsftpd.conf 2008-01-04 11:46:48.000000000 -0500 +--- fail2ban~/config/filter.d/vsftpd.conf 2008-01-04 12:02:47.000000000 -0500 ++++ fail2ban/config/filter.d/vsftpd.conf 2008-01-04 12:10:25.000000000 -0500 @@ -13,7 +13,7 @@ # be used for standard IP/hostname matching. # Values: TEXT # -failregex = vsftpd: \(pam_unix\) authentication failure; .* rhost= -+failregex = vsftpd: \(pam_unix\) authentication failure; .* rhost=(?: user=\w*)?\s*$ ++failregex = vsftpd: \(pam_unix\) authentication failure; .* rhost=(?:\s+user=\S*)?\s*$ # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored.