Mercurial > repos > other > Puppet
comparison common/fail2ban/ibb-repeat-offender-ssh.conf @ 195:f70831cc2864 puppet-3.6
Separate out SSH repeats from web/email repeats
Hopefully this should prevent accidental lock-outs! Worst case, I
trigger a web lock-out and get back in on SSH.
| author | IBBoard <dev@ibboard.co.uk> |
|---|---|
| date | Wed, 17 Apr 2019 12:00:31 +0100 |
| parents | |
| children |
comparison
equal
deleted
inserted
replaced
| 194:a08de3153548 | 195:f70831cc2864 |
|---|---|
| 1 # IBB-Repeat-Offender-SSH configuration file | |
| 2 # | |
| 3 # Author: Tom Hendrikx, minor modifications by Amir Caspi | |
| 4 # See http://whyscream.net/wiki/index.php/Fail2ban_monitoring_Fail2ban | |
| 5 # Renamed and adjusted by IBBoard for consistency | |
| 6 # | |
| 7 | |
| 8 [Definition] | |
| 9 | |
| 10 # Option: failregex | |
| 11 # Notes.: regex to match the password failures messages in the logfile. The | |
| 12 # host must be matched by a group named "host". The tag "<HOST>" can | |
| 13 # be used for standard IP/hostname matching and is only an alias for | |
| 14 # (?:::f{4,6}:)?(?P<host>[\w\-.^_]+) | |
| 15 # Values: TEXT | |
| 16 # | |
| 17 failregex = NOTICE\s+\[ssh-[^\]]+\]\s+Ban\s+<HOST> | |
| 18 | |
| 19 # Option: ignoreregex | |
| 20 # Notes.: regex to ignore. If this regex matches, the line is ignored. | |
| 21 # Values: TEXT | |
| 22 # | |
| 23 #ignoreregex = |