prehistoric-systems/fail2ban
1
0
Fork 0
mirror of https://github.com/fail2ban/fail2ban.git synced 2026-03-11 08:55:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

ENH: Nagios filter

Browse source 
Sample log for the first failregex is available in the testcases. No example available for the IPv6 denial yet.
This commit is contained in:
Ivo Truxa 2014-02-03 21:46:07 +01:00
parent 110b8e6905
commit c91fda8619
1 changed files with 21 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
config/filter.d/nagios.conf Normal file
View file

@ -0,0 +1,21 @@
# Fail2Ban filter for Nagios Remote Plugin Executor (nrpe2)
# Detecting unauthorized access to the nrpe2 daemon
# typically logged in /var/log/messages syslog
#
[INCLUDES]
# Read syslog common prefixes
before = common.conf
[Definition]
_daemon = nrpe
failregex = ^%(__prefix_line)sHost <HOST> is not allowed to talk to us!\s*$
= ^%(__prefix_line)sConnection from <HOST> closed. We don't support AF_INET6 addreess family in ACL\s*$
ignoreregex =.
# DEV Notes:
#
# Author: Ivo Truxa - 2014/02/03