Your message dated Tue, 22 Jul 2008 16:32:05 +0000 with message-id <[EMAIL PROTECTED]> and subject line Bug#481760: fixed in fail2ban 0.8.3-1 has caused the Debian Bug report #481760, regarding "Failed none" causes false triggers to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [EMAIL PROTECTED] immediately.) -- 481760: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=481760 Debian Bug Tracking System Contact [EMAIL PROTECTED] with problems
--- Begin Message ---Package: fail2ban Version: 0.8.2-3 when connecting with ssh keys, no password, sshd logs: May 18 05:08:45 twinlark sshd[5681]: Failed none for dean from 10.1.1.1 port 37262 ssh2 May 18 05:08:45 twinlark sshd[5681]: Found matching RSA key: xxxx May 18 05:08:45 twinlark sshd[5681]: Found matching RSA key: xxxx May 18 05:08:45 twinlark sshd[5681]: Accepted publickey for dean from 10.1.1.1 port 37262 ssh2 and fail2ban considers the "Failed none" to be an attack... enough successful logins like this and the IP is banned. this is broken. best fix i can see is to be more explicit about the /etc/fail2ban/filter.d/sshd.conf filters, such as: ^%(__prefix_line)sFailed password for .* from <HOST>(?: port \d*)?(?: ssh\d*)?$ ^%(__prefix_line)sFailed publickey for .* from <HOST>(?: port \d*)?(?: ssh\d*)?$ -dean
--- End Message ---
--- Begin Message ---Source: fail2ban Source-Version: 0.8.3-1 We believe that the bug you reported is fixed in the latest version of fail2ban, which is due to be installed in the Debian FTP archive: fail2ban_0.8.3-1.diff.gz to pool/main/f/fail2ban/fail2ban_0.8.3-1.diff.gz fail2ban_0.8.3-1.dsc to pool/main/f/fail2ban/fail2ban_0.8.3-1.dsc fail2ban_0.8.3-1_all.deb to pool/main/f/fail2ban/fail2ban_0.8.3-1_all.deb fail2ban_0.8.3.orig.tar.gz to pool/main/f/fail2ban/fail2ban_0.8.3.orig.tar.gz A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Yaroslav Halchenko <[EMAIL PROTECTED]> (supplier of updated fail2ban package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 21 Jul 2008 10:27:12 -0400 Source: fail2ban Binary: fail2ban Architecture: source all Version: 0.8.3-1 Distribution: unstable Urgency: low Maintainer: Yaroslav Halchenko <[EMAIL PROTECTED]> Changed-By: Yaroslav Halchenko <[EMAIL PROTECTED]> Description: fail2ban - bans IPs that cause multiple authentication errors Closes: 479966 481760 Changes: fail2ban (0.8.3-1) unstable; urgency=low . * Fresh upstream release * Boosted policy compliance to 3.8.0 (no changes needed) * Specify explicitely facilities in "Failed .. for". Thanks Dean Gaudet. (closes: #481760) * Added failregex for "User not known" in sshd.conf. thanks Alexander Gerasiov (closes: #479966) Checksums-Sha1: c5676643aa297f60f30274eeb7e4ff82088b7ab8 1193 fail2ban_0.8.3-1.dsc f7d8647b45767c76f7759aa190225b82750d5079 76159 fail2ban_0.8.3.orig.tar.gz a920653bf866ab8d0ed833180a29e26c865e42b6 24099 fail2ban_0.8.3-1.diff.gz 62fbc892af96ec25c62ace075a6d102c87070765 86084 fail2ban_0.8.3-1_all.deb Checksums-Sha256: d3438d5c2d5b981fb172c0fb9cb580643522c23e87202031e5919f46c8f77011 1193 fail2ban_0.8.3-1.dsc 046352d43589f0a6acc32736cfeb4e3bfc20d32cb8240f0059e25d69f109f167 76159 fail2ban_0.8.3.orig.tar.gz e2fad4c20c17de723a2589ae45d54fb35ac484d3f11949110370cfb0d5c02e98 24099 fail2ban_0.8.3-1.diff.gz 9e4cfe000254580a1001d78ea5109359adec7bea885820252baf2fb06cc74676 86084 fail2ban_0.8.3-1_all.deb Files: 6e4b3976c33f3551fb668ce0ee22afe2 1193 net optional fail2ban_0.8.3-1.dsc 1119c7d563ee0fb4a095ef1d7635544a 76159 net optional fail2ban_0.8.3.orig.tar.gz 71f14fb93e7e97a44ed2f4077c54e3bd 24099 net optional fail2ban_0.8.3-1.diff.gz 28fa25eb5b3466ce6366fc2d9c4685c0 86084 net optional fail2ban_0.8.3-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFIhgjejRFFY3XAJMgRAqn6AJwLJWmpZcqODQtf59ObHctjMfywKwCfbyif Wc+D6DSIwffwQQNO+UU7oXo= =bGgy -----END PGP SIGNATURE-----
--- End Message ---
