Add new regexp to match invalid users to bsd-ssh filter.

I have observed a regression where the old expression was not
working. Looks like the regression was caused by the migration to
python 3.

As far as I can see the quarterly branch is not affected.

PR:		245097
Approved by: portmgr (blanket: run-time bugfix)
This commit is contained in:
Guido Falsi 2020-03-27 15:29:20 +00:00
parent 458bf6b8dc
commit ada94293c8
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=529264
2 changed files with 4 additions and 2 deletions

View file

@ -2,6 +2,7 @@
PORTNAME= fail2ban
PORTVERSION= 0.11.1
PORTREVISION= 1
CATEGORIES= security python
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}

View file

@ -1,6 +1,6 @@
--- config/filter.d/bsd-sshd.conf.orig 2015-11-03 04:11:30 UTC
--- config/filter.d/bsd-sshd.conf.orig 2020-03-27 11:15:56 UTC
+++ config/filter.d/bsd-sshd.conf
@@ -0,0 +1,40 @@
@@ -0,0 +1,41 @@
+# Fail2Ban configuration file
+#
+# Author: Cyril Jaquier
@ -31,6 +31,7 @@
+ ^%(__prefix_line)sFailed [-/\w]+ for .* from <HOST>(?: port \d*)?(?: ssh\d*)?$
+ ^%(__prefix_line)sROOT LOGIN REFUSED.* FROM <HOST>\s*$
+ ^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST>\s*$
+ ^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST> port \d*$
+ ^%(__prefix_line)sUser \S+ from <HOST> not allowed because not listed in AllowUsers$
+ ^%(__prefix_line)sauthentication failure; logname=\S* uid=\S* euid=\S* tty=\S* ruser=\S* rhost=<HOST>(?:\s+user=.*)?\s*$
+ ^%(__prefix_line)srefused connect from \S+ \(<HOST>\)\s*$