Update froxlor-auth.conf and add keywords_to_remove option

Updated regex in froxlor-auth.conf to match new logging format and modified logpath in jail.conf. Introduced keywords_to_remove option in abuseipdb action for improved reporting.
This commit is contained in:
Georgiy Sitnikov 2025-10-23 11:27:58 +02:00 committed by GitHub
parent 3f721eb019
commit af66ef8799
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -73,7 +73,7 @@ ver. 1.1.1-dev-1 (20??/??/??) - development nightly edition
several log messages will be tagged with as originating from a process named "sshd-session" rather than "sshd" (gh-3782)
- `ddos` and `aggressive` modes: regex extended for timeout before authentication (optional connection from part, gh-3907)
* `filter.d/vsftpd.conf` - fixed regex (if failures generated by systemd-journal, gh-3954)
* `filter.d/froxlor-auth.conf` - updated the regex to the new logging situation for froxlor and changed logpath in jail.conf (gh-4075).
* `filter.d/froxlor-auth.conf` - updated the regex to the new logging situation for froxlor and changed logpath in jail.conf (gh-4075).
### New Features and Enhancements
* backend `systemd` extended with new parameter `rotated` (default `false`, as prevention against "too many open files"),
@ -114,7 +114,7 @@ ver. 1.1.1-dev-1 (20??/??/??) - development nightly edition
* `filter.d/sendmail-reject.conf` - also recognize "Domain of sender address ... does not resolve" (gh-4035)
* `filter.d/vaultwarden.conf` - new filter and jail for Vaultwarden (gh-3979)
* `fail2ban-regex` extended with new option `-i` or `--invert` to output not-matched lines by `-o` or `--out` (gh-4001)
* `abuseipdb` - introduce `keywords_to_remove` option in `abuseipdb` action to improve reporting with filtering out important information. Set `keywords_to_remove` to `keyword1|keywod2| some text`. Case insensetive
ver. 1.1.0 (2024/04/25) - object-found--norad-59479-cospar-2024-069a--altitude-36267km
-----------