CERBERUS/fail2ban
1
0
Fork 0
mirror of https://github.com/fail2ban/fail2ban.git synced 2026-07-11 10:03:03 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

ENH: hardened added dropbear failregex to avoid trailing .* and enclose username in ''

Browse source
This commit is contained in:
Yaroslav Halchenko 2013-08-08 09:58:36 -04:00
parent 9487ee5562
commit 4e0ddc5f67
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
config/filter.d/dropbear.conf
View file

@ -29,7 +29,7 @@ _daemon = dropbear
#
failregex = ^%(__prefix_line)s(L|l)ogin attempt for nonexistent user ('.*' )?from <HOST>:.*\s*$
^%(__prefix_line)s(B|b)ad password attempt for .+ from <HOST>:.*\s*$
^%(__prefix_line)sExit before auth \(user .+, \d+ fails\): Max auth tries reached - user .+ from <HOST>:.*\s*$
^%(__prefix_line)sExit before auth \(user '.+', \d+ fails\): Max auth tries reached - user '.+' from <HOST>:\d+\s*$
# The only line we need to match with the modified dropbear.