From eab9af9caa872ca0ebf080f07a1c359ee9ffa737 Mon Sep 17 00:00:00 2001 From: Yaroslav Halchenko Date: Wed, 23 Mar 2011 20:37:19 +0000 Subject: [PATCH] BF: proftpd filter -- if login failed -- count regardless of the reason for failure git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@775 a942ae1a-1317-0410-a47c-b1dcaea8d605 --- config/filter.d/proftpd.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/filter.d/proftpd.conf b/config/filter.d/proftpd.conf index eb43a14d..55a15da9 100644 --- a/config/filter.d/proftpd.conf +++ b/config/filter.d/proftpd.conf @@ -15,7 +15,7 @@ # Values: TEXT # failregex = \(\S+\[\]\)[: -]+ USER \S+: no such user found from \S+ \[\S+\] to \S+:\S+ *$ - \(\S+\[\]\)[: -]+ USER \S+ \(Login failed\): Incorrect password\. *$ + \(\S+\[\]\)[: -]+ USER \S+ \(Login failed\): .*$ \(\S+\[\]\)[: -]+ SECURITY VIOLATION: \S+ login attempted\. *$ \(\S+\[\]\)[: -]+ Maximum login attempts \(\d+\) exceeded *$