Date: Fri, 27 Mar 2020 15:29:21 +0000 (UTC) From: Guido Falsi <madpilot@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r529264 - in head/security/py-fail2ban: . files Message-ID: <202003271529.02RFTLYH002324@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: madpilot Date: Fri Mar 27 15:29:20 2020 New Revision: 529264 URL: https://svnweb.freebsd.org/changeset/ports/529264 Log: Add new regexp to match invalid users to bsd-ssh filter. I have observed a regression where the old expression was not working. Looks like the regression was caused by the migration to python 3. As far as I can see the quarterly branch is not affected. PR: 245097 Approved by: portmgr (blanket: run-time bugfix) Modified: head/security/py-fail2ban/Makefile head/security/py-fail2ban/files/patch-config_filter.d_bsd-sshd.conf Modified: head/security/py-fail2ban/Makefile ============================================================================== --- head/security/py-fail2ban/Makefile Fri Mar 27 15:28:45 2020 (r529263) +++ head/security/py-fail2ban/Makefile Fri Mar 27 15:29:20 2020 (r529264) @@ -2,6 +2,7 @@ PORTNAME= fail2ban PORTVERSION= 0.11.1 +PORTREVISION= 1 CATEGORIES= security python PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX} Modified: head/security/py-fail2ban/files/patch-config_filter.d_bsd-sshd.conf ============================================================================== --- head/security/py-fail2ban/files/patch-config_filter.d_bsd-sshd.conf Fri Mar 27 15:28:45 2020 (r529263) +++ head/security/py-fail2ban/files/patch-config_filter.d_bsd-sshd.conf Fri Mar 27 15:29:20 2020 (r529264) @@ -1,6 +1,6 @@ ---- config/filter.d/bsd-sshd.conf.orig 2015-11-03 04:11:30 UTC +--- config/filter.d/bsd-sshd.conf.orig 2020-03-27 11:15:56 UTC +++ config/filter.d/bsd-sshd.conf -@@ -0,0 +1,40 @@ +@@ -0,0 +1,41 @@ +# Fail2Ban configuration file +# +# Author: Cyril Jaquier @@ -31,6 +31,7 @@ + ^%(__prefix_line)sFailed [-/\w]+ for .* from <HOST>(?: port \d*)?(?: ssh\d*)?$ + ^%(__prefix_line)sROOT LOGIN REFUSED.* FROM <HOST>\s*$ + ^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST>\s*$ ++ ^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST> port \d*$ + ^%(__prefix_line)sUser \S+ from <HOST> not allowed because not listed in AllowUsers$ + ^%(__prefix_line)sauthentication failure; logname=\S* uid=\S* euid=\S* tty=\S* ruser=\S* rhost=<HOST>(?:\s+user=.*)?\s*$ + ^%(__prefix_line)srefused connect from \S+ \(<HOST>\)\s*$
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202003271529.02RFTLYH002324>