WebSVN – configs – Diff – /homeserver/etc/fail2ban/paths-common.conf



[INCLUDES]
 
after  = paths-overrides.local
 
[DEFAULT]
 
default_backend = auto
 
sshd_log = %(syslog_authpriv)s
sshd_backend = %(default_backend)s
 
dropbear_log = %(syslog_authpriv)s
dropbear_backend = %(default_backend)s
 
# There is no sensible generic defaults for syslog log targets, thus
# leaving them empty here so that no errors while parsing/interpolating configs
syslog_daemon =
syslog_ftp =
syslog_local0 =
syslog_mail_warn =
syslog_user =
# Set the default syslog backend target to default_backend
syslog_backend = %(default_backend)s
 
# from /etc/audit/auditd.conf
auditd_log = /var/log/audit/audit.log
 
exim_main_log = /var/log/exim/mainlog
 
nginx_error_log = /var/log/nginx/*error.log
 
nginx_access_log = /var/log/nginx/*access.log
 
 
lighttpd_error_log = /var/log/lighttpd/error.log
 
# http://www.hardened-php.net/suhosin/configuration.html#suhosin.log.syslog.facility

 
suhosin_log = %(syslog_user)s %(lighttpd_error_log)s
 
# defaults to ftp or local2 if ftp doesn't exist
proftpd_log = %(syslog_ftp)s
proftpd_backend = %(default_backend)s
 
# http://svnweb.freebsd.org/ports/head/ftp/proftpd/files/patch-src_proftpd.8.in?view=markup
# defaults to ftp but can be overwritten.
pureftpd_log = %(syslog_ftp)s
pureftpd_backend = %(default_backend)s
 
# ftp, daemon and then local7 are tried at configure time however it is overwriteable at configure time
#
wuftpd_log = %(syslog_ftp)s
wuftpd_backend = %(default_backend)s
 
# syslog_enable defaults to no. so it defaults to vsftpd_log_file setting of /var/log/vsftpd.log
# No distro seems to set it to syslog by default
# If syslog set it defaults to ftp facility if exists at compile time otherwise falls back to daemonlog.
vsftpd_log = /var/log/vsftpd.log
 
# Technically syslog_facility in main.cf can overwrite but no-one sane does this.
postfix_log = %(syslog_mail_warn)s
postfix_backend = %(default_backend)s
 
dovecot_log = %(syslog_mail_warn)s
dovecot_backend = %(default_backend)s
 
# Seems to be set at compile time only to LOG_LOCAL0 (src/const.h) at Notice level
solidpop3d_log = %(syslog_local0)s
 
mysql_log = %(syslog_daemon)s
mysql_backend = %(default_backend)s
 
roundcube_errors_log = /var/log/roundcube/errors
 
# Directory with ignorecommand scripts
ignorecommands_dir = /etc/fail2ban/filter.d/ignorecommands

Rev 39	Rev 71
Line 4...	Line 4...
4	`[INCLUDES]`	4	`[INCLUDES]`
5		5
6	`after = paths-overrides.local`	6	`after = paths-overrides.local`
7		7
8	`[DEFAULT]`	8	`[DEFAULT]`
-		9
-		10	`default_backend = auto`
9		11
10	`sshd_log = %(syslog_authpriv)s`	12	`sshd_log = %(syslog_authpriv)s`
-		13	`sshd_backend = %(default_backend)s`
11		14
12	`dropbear_log = %(syslog_authpriv)s`	15	`dropbear_log = %(syslog_authpriv)s`
-		16	`dropbear_backend = %(default_backend)s`
13		17
14	`# There is no sensible generic defaults for syslog log targets, thus`	18	`# There is no sensible generic defaults for syslog log targets, thus`
15	`# leaving them empty here so that no errors while parsing/interpolating configs`	19	`# leaving them empty here so that no errors while parsing/interpolating configs`
16	`syslog_daemon =`	20	`syslog_daemon =`
17	`syslog_ftp =`	21	`syslog_ftp =`
18	`syslog_local0 =`	22	`syslog_local0 =`
19	`syslog_mail_warn =`	23	`syslog_mail_warn =`
20	`syslog_user =`	24	`syslog_user =`
-		25	`# Set the default syslog backend target to default_backend`
-		26	`syslog_backend = %(default_backend)s`
21		27
22	`# from /etc/audit/auditd.conf`	28	`# from /etc/audit/auditd.conf`
23	`auditd_log = /var/log/audit/audit.log`	29	`auditd_log = /var/log/audit/audit.log`
24		30
25	`exim_main_log = /var/log/exim/mainlog`	31	`exim_main_log = /var/log/exim/mainlog`
26		32
27	`nginx_error_log = /var/log/nginx/error.log`	33	`nginx_error_log = /var/log/nginx/*error.log`
28		34
29	`nginx_access_log = /var/log/nginx/access.log`	35	`nginx_access_log = /var/log/nginx/*access.log`
30		36
31		37
32	`lighttpd_error_log = /var/log/lighttpd/error.log`	38	`lighttpd_error_log = /var/log/lighttpd/error.log`
33		39
34	`# http://www.hardened-php.net/suhosin/configuration.html#suhosin.log.syslog.facility`	40	`# http://www.hardened-php.net/suhosin/configuration.html#suhosin.log.syslog.facility`
Line 36...	Line 42...
36		42
37	`suhosin_log = %(syslog_user)s %(lighttpd_error_log)s`	43	`suhosin_log = %(syslog_user)s %(lighttpd_error_log)s`
38		44
39	`# defaults to ftp or local2 if ftp doesn't exist`	45	`# defaults to ftp or local2 if ftp doesn't exist`
40	`proftpd_log = %(syslog_ftp)s`	46	`proftpd_log = %(syslog_ftp)s`
-		47	`proftpd_backend = %(default_backend)s`
41		48
42	`# http://svnweb.freebsd.org/ports/head/ftp/proftpd/files/patch-src_proftpd.8.in?view=markup`	49	`# http://svnweb.freebsd.org/ports/head/ftp/proftpd/files/patch-src_proftpd.8.in?view=markup`
43	`# defaults to ftp but can be overwritten.`	50	`# defaults to ftp but can be overwritten.`
44	`pureftpd_log = %(syslog_ftp)s`	51	`pureftpd_log = %(syslog_ftp)s`
-		52	`pureftpd_backend = %(default_backend)s`
45		53
46	`# ftp, daemon and then local7 are tried at configure time however it is overwriteable at configure time`	54	`# ftp, daemon and then local7 are tried at configure time however it is overwriteable at configure time`
47	`#`	55	`#`
48	`wuftpd_log = %(syslog_ftp)s`	56	`wuftpd_log = %(syslog_ftp)s`
-		57	`wuftpd_backend = %(default_backend)s`
49		58
50	`# syslog_enable defaults to no. so it defaults to vsftpd_log_file setting of /var/log/vsftpd.log`	59	`# syslog_enable defaults to no. so it defaults to vsftpd_log_file setting of /var/log/vsftpd.log`
51	`# No distro seems to set it to syslog by default`	60	`# No distro seems to set it to syslog by default`
52	`# If syslog set it defaults to ftp facility if exists at compile time otherwise falls back to daemonlog.`	61	`# If syslog set it defaults to ftp facility if exists at compile time otherwise falls back to daemonlog.`
53	`vsftpd_log = /var/log/vsftpd.log`	62	`vsftpd_log = /var/log/vsftpd.log`
54		63
55	`# Technically syslog_facility in main.cf can overwrite but no-one sane does this.`	64	`# Technically syslog_facility in main.cf can overwrite but no-one sane does this.`
56	`postfix_log = %(syslog_mail_warn)s`	65	`postfix_log = %(syslog_mail_warn)s`
-		66	`postfix_backend = %(default_backend)s`
57		67
58	`dovecot_log = %(syslog_mail_warn)s`	68	`dovecot_log = %(syslog_mail_warn)s`
-		69	`dovecot_backend = %(default_backend)s`
59		70
60	`# Seems to be set at compile time only to LOG_LOCAL0 (src/const.h) at Notice level`	71	`# Seems to be set at compile time only to LOG_LOCAL0 (src/const.h) at Notice level`
61	`solidpop3d_log = %(syslog_local0)s`	72	`solidpop3d_log = %(syslog_local0)s`
62		73
63	`mysql_log = %(syslog_daemon)s`	74	`mysql_log = %(syslog_daemon)s`
-		75	`mysql_backend = %(default_backend)s`
64		76
65	`roundcube_errors_log = /var/log/roundcube/errors`	77	`roundcube_errors_log = /var/log/roundcube/errors`
66		78
67	`# Directory with ignorecommand scripts`	79	`# Directory with ignorecommand scripts`
68	`ignorecommands_dir = /etc/fail2ban/filter.d/ignorecommands`	80	`ignorecommands_dir = /etc/fail2ban/filter.d/ignorecommands`

Subversion Repositories configs

(root)/homeserver/etc/fail2ban/paths-common.conf – Rev 39 → 71