Package: fail2ban
Version: 0.8.4-3+squeeze2
Severity: important
Tags: patch upstream
The vsftpd.conf filter does not match lines from auth.log or vsftpd.log, and
produces the following error when run manually:
/etc/fail2ban$ egrep -f filter.d/vsftpd.conf /var/log/vsftpd.log
egrep: Invalid range end
I've replaced the filter with a custon one that is run only against
/var/log/vsftpd.log:
failregex = \[pid [0-9]+] \[.*\] FAIL LOGIN: Client "<HOST>"
I have tested the rule on a wheezy installation and gotten the same result.
-- System Information:
Debian Release: 6.0.9
APT prefers oldstable-updates
APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: i386 (i686)
Kernel: Linux 3.2.0-0.bpo.4-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash
Versions of packages fail2ban depends on:
ii lsb-base 3.2-23.2squeeze1 Linux Standard Base 3.2 init scrip
ii python 2.6.6-3+squeeze7 interactive high-level object-orie
ii python-central 0.6.16+nmu1 register and build utility for Pyt
Versions of packages fail2ban recommends:
ii iptables 1.4.8-3 administration tools for packet fi
ii whois 5.0.10 an intelligent whois client
Versions of packages fail2ban suggests:
ii bsd-mailx [mailx] 8.1.2-0.20100314cvs-1 simple mail user agent
pn python-gamin <none> (no description available)
-- Configuration Files:
/etc/fail2ban/filter.d/vsftpd.conf changed [not included]
/etc/fail2ban/jail.conf changed [not included]
-- no debconf information
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
