From 9cf01b2dacae4287fb04a43c77a292bdb69f8a8f Mon Sep 17 00:00:00 2001 From: Yaroslav Halchenko Date: Wed, 25 Jan 2006 15:12:44 +0000 Subject: [PATCH] relaxed regex for awstat.pl a bit --- config/fail2ban.conf.default | 2 +- debian/changelog | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/config/fail2ban.conf.default b/config/fail2ban.conf.default index c510fb44..2641fbdc 100644 --- a/config/fail2ban.conf.default +++ b/config/fail2ban.conf.default @@ -319,7 +319,7 @@ timepattern = %%a %%b %%d %%H:%%M:%%S %%Y # Notes.: regex to match the password failure messages in the logfile. # Values: TEXT Default: [[]client (?P\S*)[]] user .*(?:: authentication failure|not found) # -failregex = ^(?P\S*) -.*"GET .*awstats\.pl\?configdir=\|echo.*404 +failregex = ^(?P\S*) -.*"GET .*awstats\.pl\?configdir=\|echo.* [SSH] # Option: enabled diff --git a/debian/changelog b/debian/changelog index f2528b80..40bcf226 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,4 +1,4 @@ -fail2ban (0.6.0-3.1) unstable; urgency=low +fail2ban (0.6.0-3.2) unstable; urgency=low * Added section ApacheAttacks to specify some common patterns of attacks on a webserver (awstats.pl as a try). This section stays split from Apache