diff --git a/config/fail2ban.conf.default b/config/fail2ban.conf.default index 71361454..a022cd6e 100644 --- a/config/fail2ban.conf.default +++ b/config/fail2ban.conf.default @@ -364,4 +364,4 @@ timepattern = %%b %%d %%H:%%M:%%S # Notes.: regex to match the password failures messages in the logfile. # Values: TEXT Default: (?:Authentication failure|Failed (?:keyboard-interactive/pam|password)) for(?: illegal user)? .* from (?:::f{4,6}:)?(?P\S*) # -failregex = : (?:(?:Authentication failure|Failed [-/\w+]+) for(?: [iI](?:llegal|nvalid) user)?|[Ii](?:llegal|nvalid) user) .* from (?:::f{4,6}:)?(?P\S*) +failregex = : (?:(?:Authentication failure|Failed [-/\w+]+) for(?: [iI](?:llegal|nvalid) user)?|[Ii](?:llegal|nvalid) user|ROOT LOGIN REFUSED) .*(?:from |FROM) (?:::f{4,6}:)?(?P\S*) diff --git a/debian/changelog b/debian/changelog index 04f12895..d933da2d 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,14 @@ +fail2ban (0.6.0-6) unstable; urgency=low + + * Updated README.Debian with information about some cases with + not-as-shipped configurations of sshd on the boxes running older versions + of openssh server + * Included regexps for SSH in case iff authentication as root using keys was + attempted whenever PermitRootLogin is set to something else than "yes" and + key authentication fails. + + -- Yaroslav Halchenko Fri, 3 Mar 2006 16:32:38 -0500 + fail2ban (0.6.0-5) unstable; urgency=low * Fixed Apache section: changed filepath to point at error.log, thus I had