fail2ban/testcases
Ivo Truxa 9f107403e8 Update exim
When using Dovecot authentication for Exim, which is relatively common, the current regex for catching authentication failures needs a small tweak. The current plain|login options are too limiting and will only work in the cases when only the Exim's rudimentary built-in authentication is used. There can be not only the dovecot_login shown in this log example, but also dovecot_plain, ntlm, cram, cyrus, md5, and plenty of others. In fact many admins may opt for their own authentication labels, when setting up Exim. For this reason the regex should catch any label. I suggest modifying the regex in the following way:

<pre>^%(pid)s \w+ authenticator failed for (\S+ )?\(\S+\) \[<HOST>\]: 535 Incorrect authentication data( \(set_id=.*\)|: \d+ Time\(s\))?\s*$</pre>
2014-01-13 01:18:09 +01:00
..
config TST: hopefully normalise config so that consistent test results occur on travis and locally 2013-12-16 10:07:41 +00:00
files Update exim 2014-01-13 01:18:09 +01:00
__init__.py ENH: remove use of $Revision and $Date SVN tags 2013-05-08 13:59:09 -04:00
actionstestcase.py TST: py2.5 compatibility - no with 2013-09-29 15:46:15 +10:00
actiontestcase.py ENH: separate out log capture framework for other test cases - now utils.LogCaptureTestCase 2013-12-11 09:50:17 +11:00
banmanagertestcase.py ENH: remove use of $Revision and $Date SVN tags 2013-05-08 13:59:09 -04:00
clientreadertestcase.py TST: ensure stock jail has all filters 2014-01-05 21:06:30 +11:00
datedetectortestcase.py ENH: adding custom date format for proftpd when logging in its own log file (default on Debian) -- includes milliseconds 2013-11-16 22:15:58 -05:00
dummyjail.py TST: add test cases for Actions 2013-09-29 14:52:59 +10:00
failmanagertestcase.py TST: failmanager get/sets on FailTotal and MaxTime 2013-09-29 15:12:44 +10:00
filtertestcase.py New ignorecommand that is added to the ignoreip list from output of an external program 2013-12-24 23:55:35 +03:00
misctestcase.py ENH: basic testing for iso8601 code which had no explicit tests + spit out ValueError for incorrect type of input and ParseError otherwise 2013-09-12 23:12:18 -04:00
samplestestcase.py ENH: per original discussion, and changes which followed, better not to ignore absent failregex -- all filters (but included common) should have it 2013-12-27 01:47:15 -05:00
servertestcase.py BF(2.4): remove use of "with" for python 2.4 for now (since we list it as supported) 2013-12-27 01:54:54 -05:00
sockettestcase.py ENH: remove use of $Revision and $Date SVN tags 2013-05-08 13:59:09 -04:00
utils.py ENH: separate out log capture framework for other test cases - now utils.LogCaptureTestCase 2013-12-11 09:50:17 +11:00