Permalink
Switch branches/tags
upstream/0.8.4 upstream/0.8.3 upstream/0.8.2 upstream/0.8.1 upstream/0.8.0 upstream/0.7.9 upstream/0.7.8 upstream/0.7.7 upstream/0.7.6 upstream/0.7.5 upstream/0.7.4 upstream/0.6.1 upstream/0.6.0 upstream/0.5.4 upstream/0.5.3 upstream/0.5.2 sdist/0.8.5 sdist/0.8.4 sdist/0.8.4+svn20110323 sdist/0.8.3 sdist/0.8.2 sdist/0.8.1 sdist/0.8.0 sdist/0.7.9 sdist/0.7.8 sdist/0.7.7 sdist/0.7.6 sdist/0.7.5 sdist/0.7.4 sdist/0.6.1 sdist/0.6.0 sdist/0.5.4 sdist/0.5.3 sdist/0.5.2 fail2ban_0.9.X debian/0.10.2-2 debian/0.10.2-1 debian/0.9.7-2 debian/0.9.7-1 debian/0.9.6-2 debian/0.9.6-1 debian/0.9.5-1 debian/0.9.4-1 debian/0.9.3-1 debian/0.9.2-1 debian/0.9.1+git44-gd65c4f8-1 debian/0.9.1-1 debian/0.9.0+git252-g47441d1-1 debian/0.9.0+git48-gabcab00-1 debian/0.9.0+git37-gdeb5924-1 debian/0.9.X-python3 debian/0.8.13-1 debian/0.8.11_pre1+git29-gccd2657-1 debian/0.8.11-1 debian/0.8.10-3 debian/0.8.10-1 debian/0.8.9-1 debian/0.8.8-1 debian/0.8.8-1+lucid0 debian/0.8.7-1 debian/0.8.6_+git69-gb4099da-1 debian/0.8.6-3 debian/0.8.6-3wheezy3 debian/0.8.6-3wheezy2 debian/0.8.6-3wheezy1 debian/0.8.6-2 debian/0.8.6-1 debian/0.8.5-2 debian/0.8.5-1 debian/0.8.4+svn20110323-1 debian/0.8.4-3 debian/0.8.4-3+squeeze3 debian/0.8.4-3+squeeze2 debian/0.8.4-3+squeeze1 debian/0.8.4-2 debian/0.8.4-1 debian/0.8.3-6 debian/0.8.3-5 debian/0.8.3-4 debian/0.8.3-3 debian/0.8.3-2 debian/0.8.3-2sid1 debian/0.8.3-1 debian/0.8.2-3 debian/0.8.2-2 debian/0.8.2-1 debian/0.8.1-5 debian/0.8.1-4 debian/0.8.1-3 debian/0.8.1-2 debian/0.8.1-1 debian/0.8.0-2 debian/0.8.0-1 debian/0.7.9-1 debian/0.7.8-1 debian/0.7.7-1 debian/0.7.6-3 debian/0.7.6-1 debian/0.7.5-3+pre6 debian/0.7.5-2
Nothing to show
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
29 lines (18 sloc) 649 Bytes
# Fail2Ban filter for suhosian PHP hardening
#
# This occurs with lighttpd or directly from the plugin
#
[INCLUDES]
# Read common prefixes. If any customizations available -- read them from
# common.local
before = common.conf
[Definition]
_daemon = (?:lighttpd|suhosin)
_lighttpd_prefix = (?:\(mod_fastcgi\.c\.\d+\) FastCGI-stderr:\s)
failregex = ^%(__prefix_line)s%(_lighttpd_prefix)s?ALERT - .*? \(attacker '<HOST>', file '[^']*'(?:, line \d+)?\)$
ignoreregex =
# DEV Notes:
#
# https://github.com/stefanesser/suhosin/blob/1fba865ab73cc98a3109f88d85eb82c1bfc29b37/log.c#L161
#
# Author: Arturo 'Buanzo' Busleiman <buanzo@buanzo.com.ar>