sync/ports
1
0
Fork 0
mirror of https://git.freebsd.org/ports.git synced 2025-05-25 07:26:29 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add new regexp to match invalid users to bsd-ssh filter.

Browse source 
I have observed a regression where the old expression was not
working. Looks like the regression was caused by the migration to
python 3.

As far as I can see the quarterly branch is not affected.

PR:		245097
Approved by: portmgr (blanket: run-time bugfix)
This commit is contained in:
Guido Falsi 2020-03-27 15:29:20 +00:00
parent 458bf6b8dc
commit ada94293c8
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=529264
2 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
security/py-fail2ban/Makefile
View file

@ -2,6 +2,7 @@
PORTNAME= fail2ban PORTNAME= fail2ban
PORTVERSION= 0.11.1 PORTVERSION= 0.11.1
PORTREVISION= 1
CATEGORIES= security python CATEGORIES= security python
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}

5
security/py-fail2ban/files/patch-config_filter.d_bsd-sshd.conf
View file

@ -1,6 +1,6 @@
--- config/filter.d/bsd-sshd.conf.orig 2015-11-03 04:11:30 UTC --- config/filter.d/bsd-sshd.conf.orig 2020-03-27 11:15:56 UTC
+++ config/filter.d/bsd-sshd.conf +++ config/filter.d/bsd-sshd.conf
@@ -0,0 +1,40 @@ @@ -0,0 +1,41 @@
+# Fail2Ban configuration file +# Fail2Ban configuration file
+# +#
+# Author: Cyril Jaquier +# Author: Cyril Jaquier
@ -31,6 +31,7 @@
+ ^%(__prefix_line)sFailed [-/\w]+ for .* from <HOST>(?: port \d*)?(?: ssh\d*)?$ + ^%(__prefix_line)sFailed [-/\w]+ for .* from <HOST>(?: port \d*)?(?: ssh\d*)?$
+ ^%(__prefix_line)sROOT LOGIN REFUSED.* FROM <HOST>\s*$ + ^%(__prefix_line)sROOT LOGIN REFUSED.* FROM <HOST>\s*$
+ ^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST>\s*$ + ^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST>\s*$
+ ^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST> port \d*$
+ ^%(__prefix_line)sUser \S+ from <HOST> not allowed because not listed in AllowUsers$ + ^%(__prefix_line)sUser \S+ from <HOST> not allowed because not listed in AllowUsers$
+ ^%(__prefix_line)sauthentication failure; logname=\S* uid=\S* euid=\S* tty=\S* ruser=\S* rhost=<HOST>(?:\s+user=.*)?\s*$ + ^%(__prefix_line)sauthentication failure; logname=\S* uid=\S* euid=\S* tty=\S* ruser=\S* rhost=<HOST>(?:\s+user=.*)?\s*$
+ ^%(__prefix_line)srefused connect from \S+ \(<HOST>\)\s*$ + ^%(__prefix_line)srefused connect from \S+ \(<HOST>\)\s*$