svn commit: r529264 - in head/security/py-fail2ban: . files
Guido Falsi
madpilot at FreeBSD.org
Fri Mar 27 15:45:34 UTC 2020
Author: madpilot
Date: Fri Mar 27 15:29:20 2020
New Revision: 529264
URL: https://svnweb.freebsd.org/changeset/ports/529264
Log:
Add new regexp to match invalid users to bsd-ssh filter.
I have observed a regression where the old expression was not
working. Looks like the regression was caused by the migration to
python 3.
As far as I can see the quarterly branch is not affected.
PR: 245097
Approved by: portmgr (blanket: run-time bugfix)
Modified:
head/security/py-fail2ban/Makefile
head/security/py-fail2ban/files/patch-config_filter.d_bsd-sshd.conf
Modified: head/security/py-fail2ban/Makefile
==============================================================================
--- head/security/py-fail2ban/Makefile Fri Mar 27 15:28:45 2020 (r529263)
+++ head/security/py-fail2ban/Makefile Fri Mar 27 15:29:20 2020 (r529264)
@@ -2,6 +2,7 @@
PORTNAME= fail2ban
PORTVERSION= 0.11.1
+PORTREVISION= 1
CATEGORIES= security python
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
Modified: head/security/py-fail2ban/files/patch-config_filter.d_bsd-sshd.conf
==============================================================================
--- head/security/py-fail2ban/files/patch-config_filter.d_bsd-sshd.conf Fri Mar 27 15:28:45 2020 (r529263)
+++ head/security/py-fail2ban/files/patch-config_filter.d_bsd-sshd.conf Fri Mar 27 15:29:20 2020 (r529264)
@@ -1,6 +1,6 @@
---- config/filter.d/bsd-sshd.conf.orig 2015-11-03 04:11:30 UTC
+--- config/filter.d/bsd-sshd.conf.orig 2020-03-27 11:15:56 UTC
+++ config/filter.d/bsd-sshd.conf
-@@ -0,0 +1,40 @@
+@@ -0,0 +1,41 @@
+# Fail2Ban configuration file
+#
+# Author: Cyril Jaquier
@@ -31,6 +31,7 @@
+ ^%(__prefix_line)sFailed [-/\w]+ for .* from <HOST>(?: port \d*)?(?: ssh\d*)?$
+ ^%(__prefix_line)sROOT LOGIN REFUSED.* FROM <HOST>\s*$
+ ^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST>\s*$
++ ^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST> port \d*$
+ ^%(__prefix_line)sUser \S+ from <HOST> not allowed because not listed in AllowUsers$
+ ^%(__prefix_line)sauthentication failure; logname=\S* uid=\S* euid=\S* tty=\S* ruser=\S* rhost=<HOST>(?:\s+user=.*)?\s*$
+ ^%(__prefix_line)srefused connect from \S+ \(<HOST>\)\s*$
More information about the svn-ports-all
mailing list