| 192 |
- |
1 |
# Fail2Ban filter for murmur/mumble-server
|
|
|
2 |
#
|
|
|
3 |
|
|
|
4 |
[Definition]
|
|
|
5 |
|
|
|
6 |
_daemon = murmurd
|
|
|
7 |
|
|
|
8 |
# N.B. If you allow users to have usernames that include the '>' character you
|
|
|
9 |
# should change this to match the regex assigned to the 'username'
|
|
|
10 |
# variable in your server config file (murmur.ini / mumble-server.ini).
|
|
|
11 |
_usernameregex = [^>]+
|
|
|
12 |
|
|
|
13 |
# Prefix for systemd-journal (with second date-pattern as optional match):
|
|
|
14 |
#
|
|
|
15 |
__prefix_journal = (?:\S+\s+%(_daemon)s\[\d+\]:(?:\s+\<W\>[\d\-]+ [\d:]+.\d+)?)
|
|
|
16 |
|
|
|
17 |
__prefix_line = %(__prefix_journal)s?
|
|
|
18 |
|
|
|
19 |
_prefix = %(__prefix_line)s\s+\d+ => <\d+:%(_usernameregex)s\(-1\)> Rejected connection from <HOST>:\d+:
|
|
|
20 |
|
|
|
21 |
prefregex = ^%(_prefix)s <F-CONTENT>.+</F-CONTENT>$
|
|
|
22 |
|
|
|
23 |
failregex = ^Invalid server password$
|
|
|
24 |
^Wrong certificate or password for existing user$
|
|
|
25 |
|
|
|
26 |
ignoreregex =
|
|
|
27 |
|
|
|
28 |
datepattern = ^<W>{DATE}
|
|
|
29 |
|
|
|
30 |
journalmatch = _SYSTEMD_UNIT=murmurd.service + _COMM=murmurd
|
|
|
31 |
|
|
|
32 |
# DEV Notes:
|
|
|
33 |
#
|
|
|
34 |
# Author: Ross Brown
|