svn commit: r370962 - in branches/2014Q4/security/bruteblock: . files
Dmitry Marakasov
amdmi3 at FreeBSD.org
Wed Oct 15 22:27:35 UTC 2014
Author: amdmi3
Date: Wed Oct 15 22:27:33 2014
New Revision: 370962
URL: https://svnweb.freebsd.org/changeset/ports/370962
QAT: https://qat.redports.org/buildarchive/r370962/
Log:
MFH: r370951
- Fix regex to match all sshd auth errors
PR: 194382
Submitted by: ronald-lists at klop.ws
Approved by: portmgr
Modified:
branches/2014Q4/security/bruteblock/Makefile
branches/2014Q4/security/bruteblock/files/patch-etc-ssh.conf
Directory Properties:
branches/2014Q4/ (props changed)
Modified: branches/2014Q4/security/bruteblock/Makefile
==============================================================================
--- branches/2014Q4/security/bruteblock/Makefile Wed Oct 15 22:26:24 2014 (r370961)
+++ branches/2014Q4/security/bruteblock/Makefile Wed Oct 15 22:27:33 2014 (r370962)
@@ -3,7 +3,7 @@
PORTNAME= bruteblock
PORTVERSION= 0.0.5
-PORTREVISION= 5
+PORTREVISION= 6
CATEGORIES= security
MASTER_SITES= http://samm.kiev.ua/bruteblock/ \
http://mirror.amdmi3.ru/distfiles/
Modified: branches/2014Q4/security/bruteblock/files/patch-etc-ssh.conf
==============================================================================
--- branches/2014Q4/security/bruteblock/files/patch-etc-ssh.conf Wed Oct 15 22:26:24 2014 (r370961)
+++ branches/2014Q4/security/bruteblock/files/patch-etc-ssh.conf Wed Oct 15 22:27:33 2014 (r370962)
@@ -15,7 +15,7 @@
+#
+regexp = sshd.*(?:Illegal|Invalid) user \S+ from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
+regexp1 = sshd.*Failed \S+ for (?:(?:illegal|invalid) user )?\S+ from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
-+regexp2 = sshd.*error: PAM: authentication error for (?:(?:illegal|invalid) user )\S+ from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
++regexp2 = sshd.*error: PAM: authentication error for (?:(?:illegal|invalid) user )?\S+ from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
+regexp3 = sshd.*Did not receive identification string from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
# Number of failed login attempts within time before we block
More information about the svn-ports-branches
mailing list