X7ROOT File Manager
Current Path:
/etc/fail2ban/filter.d
etc
/
fail2ban
/
filter.d
/
📁
..
📄
3proxy.conf
(467 B)
📄
apache-auth.conf
(3.15 KB)
📄
apache-badbots.conf
(2.76 KB)
📄
apache-botsearch.conf
(1.24 KB)
📄
apache-common.conf
(1.58 KB)
📄
apache-fakegooglebot.conf
(324 B)
📄
apache-modsecurity.conf
(511 B)
📄
apache-nohome.conf
(596 B)
📄
apache-noscript.conf
(1.22 KB)
📄
apache-overflows.conf
(2.13 KB)
📄
apache-pass.conf
(362 B)
📄
apache-shellshock.conf
(1020 B)
📄
assp.conf
(3.41 KB)
📄
asterisk.conf
(2.31 KB)
📄
bitwarden.conf
(427 B)
📄
botsearch-common.conf
(522 B)
📄
centreon.conf
(307 B)
📄
common.conf
(2.71 KB)
📄
counter-strike.conf
(244 B)
📄
courier-auth.conf
(429 B)
📄
courier-smtp.conf
(512 B)
📄
cyrus-imap.conf
(444 B)
📄
directadmin.conf
(338 B)
📄
domino-smtp.conf
(2.06 KB)
📄
dovecot.conf
(2.4 KB)
📄
dropbear.conf
(1.69 KB)
📄
drupal-auth.conf
(557 B)
📄
ejabberd-auth.conf
(1.54 KB)
📄
exim-common.conf
(516 B)
📄
exim-spam.conf
(2.11 KB)
📄
exim.conf
(2.81 KB)
📄
freeswitch.conf
(1.88 KB)
📄
froxlor-auth.conf
(1.18 KB)
📄
gitlab.conf
(236 B)
📄
grafana.conf
(388 B)
📄
groupoffice.conf
(236 B)
📄
gssftpd.conf
(322 B)
📄
guacamole.conf
(1.41 KB)
📄
haproxy-http-auth.conf
(1.14 KB)
📄
horde.conf
(404 B)
📁
ignorecommands
📄
kerio.conf
(938 B)
📄
lighttpd-auth.conf
(333 B)
📄
mongodb-auth.conf
(2.23 KB)
📄
monit.conf
(787 B)
📄
murmur.conf
(927 B)
📄
mysqld-auth.conf
(953 B)
📄
nagios.conf
(400 B)
📄
named-refused.conf
(1.46 KB)
📄
nginx-botsearch.conf
(681 B)
📄
nginx-http-auth.conf
(485 B)
📄
nginx-limit-req.conf
(1.42 KB)
📄
nsd.conf
(760 B)
📄
openhab.conf
(452 B)
📄
openwebmail.conf
(495 B)
📄
oracleims.conf
(1.89 KB)
📄
pam-generic.conf
(947 B)
📄
perdition.conf
(568 B)
📄
php-url-fopen.conf
(891 B)
📄
phpmyadmin-syslog.conf
(278 B)
📄
portsentry.conf
(242 B)
📄
postfix.conf
(3.09 KB)
📄
proftpd.conf
(1.14 KB)
📄
pure-ftpd.conf
(2.35 KB)
📄
qmail.conf
(795 B)
📄
recidive.conf
(1.34 KB)
📄
roundcube-auth.conf
(1.46 KB)
📄
screensharingd.conf
(821 B)
📄
selinux-common.conf
(538 B)
📄
selinux-ssh.conf
(570 B)
📄
sendmail-auth.conf
(776 B)
📄
sendmail-reject.conf
(2.88 KB)
📄
sieve.conf
(371 B)
📄
slapd.conf
(706 B)
📄
softethervpn.conf
(451 B)
📄
sogo-auth.conf
(722 B)
📄
solid-pop3d.conf
(1.07 KB)
📄
squid.conf
(260 B)
📄
squirrelmail.conf
(191 B)
📄
sshd.conf
(7.34 KB)
📄
stunnel.conf
(363 B)
📄
suhosin.conf
(649 B)
📄
tine20.conf
(890 B)
📄
traefik-auth.conf
(2.33 KB)
📄
uwimap-auth.conf
(374 B)
📄
vsftpd.conf
(637 B)
📄
webmin-auth.conf
(444 B)
📄
wuftpd.conf
(520 B)
📄
xinetd-fail.conf
(521 B)
📄
znc-adminlog.conf
(912 B)
📄
zoneminder.conf
(524 B)
Editing: dropbear.conf
# Fail2Ban filter for dropbear # # NOTE: The regex below is ONLY intended to work with a patched # version of Dropbear as described here: # http://www.unchartedbackwaters.co.uk/pyblosxom/static/patches # ^%(__prefix_line)sexit before auth from <HOST>.*\s*$ # # The standard Dropbear output doesn't provide enough information to # ban all types of attack. The Dropbear patch adds IP address # information to the 'exit before auth' message which is always # produced for any form of non-successful login. It is that message # which this file matches. # # More information: http://bugs.debian.org/546913 [INCLUDES] # Read common prefixes. If any customizations available -- read them from # common.local before = common.conf [Definition] _daemon = dropbear prefregex = ^%(__prefix_line)s<F-CONTENT>(?:[Ll]ogin|[Bb]ad|[Ee]xit).+</F-CONTENT>$ failregex = ^[Ll]ogin attempt for nonexistent user ('.*' )?from <HOST>:\d+$ ^[Bb]ad (PAM )?password attempt for .+ from <HOST>(:\d+)?$ ^[Ee]xit before auth \(user '.+', \d+ fails\): Max auth tries reached - user '.+' from <HOST>:\d+\s*$ ignoreregex = # DEV Notes: # # The first two regexs here match the unmodified dropbear messages. It isn't # possible to match the source of the 'exit before auth' messages from dropbear # as they don't include the "from <HOST>" bit. # # The second last failregex line we need to match with the modified dropbear. # # For the second regex the following apply: # # http://www.netmite.com/android/mydroid/external/dropbear/svr-authpam.c # http://svn.dd-wrt.com/changeset/16642#file64 # # http://svn.dd-wrt.com/changeset/16642/src/router/dropbear/svr-authpasswd.c # # Author: Francis Russell # Zak B. Elep
Upload File
Create Folder