From 2d068572bc2b17838290858e0c5a760169948f00 Mon Sep 17 00:00:00 2001 From: Yaroslav Halchenko Date: Sat, 16 Nov 2013 21:35:04 -0500 Subject: [PATCH] debian/jail.conf - dropbear jail: use dropbear filter (instead of ssh) and monitor auth.log instead of non-existing /var/log/dropbear (Closes: #620760) --- debian/changelog | 5 ++++- debian/jail.conf | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/debian/changelog b/debian/changelog index e945a45a..d41e46de 100644 --- a/debian/changelog +++ b/debian/changelog @@ -3,8 +3,11 @@ fail2ban (0.8.11-1) unstable; urgency=low * Fresh upstream release - this release tightens all shipped filters to preclude possible injections leading to targetted DoS attacks. + * debian/jail.conf + - dropbear jail: use dropbear filter (instead of ssh) and monitor + auth.log instead of non-existing /var/log/dropbear (Closes: #620760) - -- Yaroslav Halchenko Sat, 16 Nov 2013 21:21:37 -0500 + -- Yaroslav Halchenko Sat, 16 Nov 2013 21:34:54 -0500 fail2ban (0.8.11~pre1+git29-gccd2657-1) unstable; urgency=low diff --git a/debian/jail.conf b/debian/jail.conf index 48827e01..bffb5cef 100644 --- a/debian/jail.conf +++ b/debian/jail.conf @@ -129,8 +129,8 @@ maxretry = 6 enabled = false port = ssh -filter = sshd -logpath = /var/log/dropbear +filter = dropbear +logpath = /var/log/auth.log maxretry = 6 # Generic filter for pam. Has to be used with action which bans all ports