attack_parser.y (sshguard-2.4.1) | : | attack_parser.y (sshguard-2.4.2) | ||
---|---|---|---|---|
skipping to change at line 75 | skipping to change at line 75 | |||
%token SSH_DISCONNECT_PREF SSH_CONNECTION_CLOSED SSH_PREAUTH_SUFF | %token SSH_DISCONNECT_PREF SSH_CONNECTION_CLOSED SSH_PREAUTH_SUFF | |||
/* SSHGuard */ | /* SSHGuard */ | |||
%token SSHGUARD_ATTACK_PREF SSHGUARD_ATTACK_SUFF | %token SSHGUARD_ATTACK_PREF SSHGUARD_ATTACK_SUFF | |||
%token SSHGUARD_BLOCK_PREF SSHGUARD_BLOCK_SUFF | %token SSHGUARD_BLOCK_PREF SSHGUARD_BLOCK_SUFF | |||
/* dovecot */ | /* dovecot */ | |||
%token DOVECOT_IMAP_LOGINERR_PREF DOVECOT_IMAP_LOGINERR_SUFF | %token DOVECOT_IMAP_LOGINERR_PREF DOVECOT_IMAP_LOGINERR_SUFF | |||
/* uwimap */ | /* uwimap */ | |||
%token UWIMAP_LOGINERR | %token UWIMAP_LOGINERR | |||
/* cyrus-imap */ | /* cyrus-imap */ | |||
%token CYRUSIMAP_SASL_LOGINERR_PREF CYRUSIMAP_SASL_LOGINERR_SUFF | %token CYRUSIMAP_SASL_LOGINERR_PREF CYRUSIMAP_SASL_LOGINERR_SUFF | |||
%token CYRUSIMAP_TLS_ERR_PREF | ||||
/* cucipop */ | /* cucipop */ | |||
%token CUCIPOP_AUTHFAIL | %token CUCIPOP_AUTHFAIL | |||
/* exim */ | /* exim */ | |||
%token EXIM_ESMTP_AUTHFAIL_PREF EXIM_ESMTP_AUTHFAIL_SUFF | %token EXIM_ESMTP_AUTHFAIL_PREF EXIM_ESMTP_AUTHFAIL_SUFF | |||
%token EXIM_ESMTP_LOGINFAIL_PREF EXIM_ESMTP_LOGINFAIL_SUFF | %token EXIM_ESMTP_LOGINFAIL_PREF EXIM_ESMTP_LOGINFAIL_SUFF | |||
/* sendmail */ | /* sendmail */ | |||
%token SENDMAIL_RELAYDENIED_PREF SENDMAIL_RELAYDENIED_SUFF | %token SENDMAIL_RELAYDENIED_PREF SENDMAIL_RELAYDENIED_SUFF | |||
%token SENDMAIL_AUTHFAILURE_PREF SENDMAIL_AUTHFAILURE_SUFF | %token SENDMAIL_AUTHFAILURE_PREF SENDMAIL_AUTHFAILURE_SUFF | |||
/* postfix */ | /* postfix */ | |||
%token POSTFIX_NO_AUTH_PREF POSTFIX_SASL_LOGINERR_PREF POSTFIX_SASL_LOGINERR_SUF F | %token POSTFIX_NO_AUTH_PREF POSTFIX_SASL_LOGINERR_PREF POSTFIX_SASL_LOGINERR_SUF F | |||
%token POSTFIX_GREYLIST POSTFIX_GREYLIST_SUFF | %token POSTFIX_GREYLIST POSTFIX_GREYLIST_SUFF | |||
%token POSTSCREEN_PREF POSTSCREEN_SUFF | ||||
/* FreeBSD's FTPd */ | /* FreeBSD's FTPd */ | |||
%token FREEBSDFTPD_LOGINERR_PREF FREEBSDFTPD_LOGINERR_SUFF | %token FREEBSDFTPD_LOGINERR_PREF FREEBSDFTPD_LOGINERR_SUFF | |||
/* proFTPd */ | /* proFTPd */ | |||
%token PROFTPD_LOGINERR_PREF PROFTPD_LOGINERR_SUFF | %token PROFTPD_LOGINERR_PREF PROFTPD_LOGINERR_SUFF | |||
/* PureFTPd */ | /* PureFTPd */ | |||
%token PUREFTPD_LOGINERR_PREF PUREFTPD_LOGINERR_SUFF | %token PUREFTPD_LOGINERR_PREF PUREFTPD_LOGINERR_SUFF | |||
/* vsftpd */ | /* vsftpd */ | |||
%token VSFTPD_LOGINERR_PREF VSFTPD_LOGINERR_SUFF | %token VSFTPD_LOGINERR_PREF VSFTPD_LOGINERR_SUFF | |||
/* cockpit */ | /* cockpit */ | |||
%token COCKPIT_AUTHFAIL_PREF COCKPIT_AUTHFAIL_SUFF | %token COCKPIT_AUTHFAIL_PREF COCKPIT_AUTHFAIL_SUFF | |||
skipping to change at line 268 | skipping to change at line 268 | |||
DOVECOT_IMAP_LOGINERR_PREF addr DOVECOT_IMAP_LOGINERR_SUFF | DOVECOT_IMAP_LOGINERR_PREF addr DOVECOT_IMAP_LOGINERR_SUFF | |||
; | ; | |||
/* attack rules for UWIMAP */ | /* attack rules for UWIMAP */ | |||
uwimapmsg: | uwimapmsg: | |||
UWIMAP_LOGINERR '[' addr ']' | UWIMAP_LOGINERR '[' addr ']' | |||
; | ; | |||
cyrusimapmsg: | cyrusimapmsg: | |||
CYRUSIMAP_SASL_LOGINERR_PREF addr CYRUSIMAP_SASL_LOGINERR_SUFF | CYRUSIMAP_SASL_LOGINERR_PREF addr CYRUSIMAP_SASL_LOGINERR_SUFF | |||
| CYRUSIMAP_TLS_ERR_PREF '[' addr ']' | ||||
; | ; | |||
/* cucipop reports @addr@ tried to log in with wrong password */ | /* cucipop reports @addr@ tried to log in with wrong password */ | |||
cucipopmsg: | cucipopmsg: | |||
CUCIPOP_AUTHFAIL addr | CUCIPOP_AUTHFAIL addr | |||
; | ; | |||
/* */ | /* */ | |||
eximmsg: | eximmsg: | |||
EXIM_ESMTP_AUTHFAIL_PREF addr EXIM_ESMTP_AUTHFAIL_SUFF | EXIM_ESMTP_AUTHFAIL_PREF addr EXIM_ESMTP_AUTHFAIL_SUFF | |||
skipping to change at line 291 | skipping to change at line 290 | |||
sendmailmsg: | sendmailmsg: | |||
SENDMAIL_RELAYDENIED_PREF addr SENDMAIL_RELAYDENIED_SUFF | SENDMAIL_RELAYDENIED_PREF addr SENDMAIL_RELAYDENIED_SUFF | |||
| SENDMAIL_AUTHFAILURE_PREF addr SENDMAIL_AUTHFAILURE_SUFF; | | SENDMAIL_AUTHFAILURE_PREF addr SENDMAIL_AUTHFAILURE_SUFF; | |||
; | ; | |||
postfixmsg: | postfixmsg: | |||
POSTFIX_SASL_LOGINERR_PREF addr POSTFIX_SASL_LOGINERR_SUFF | POSTFIX_SASL_LOGINERR_PREF addr POSTFIX_SASL_LOGINERR_SUFF | |||
| POSTFIX_NO_AUTH_PREF addr ']' | | POSTFIX_NO_AUTH_PREF addr ']' | |||
| POSTFIX_GREYLIST addr POSTFIX_GREYLIST_SUFF | | POSTFIX_GREYLIST addr POSTFIX_GREYLIST_SUFF | |||
| POSTSCREEN_PREF addr POSTSCREEN_SUFF | ||||
; | ; | |||
/* attack rules for FreeBSD's ftpd */ | /* attack rules for FreeBSD's ftpd */ | |||
freebsdftpdmsg: | freebsdftpdmsg: | |||
FREEBSDFTPD_LOGINERR_PREF addr FREEBSDFTPD_LOGINERR_SUFF | FREEBSDFTPD_LOGINERR_PREF addr FREEBSDFTPD_LOGINERR_SUFF | |||
; | ; | |||
/* attack rules for ProFTPd */ | /* attack rules for ProFTPd */ | |||
proftpdmsg: | proftpdmsg: | |||
PROFTPD_LOGINERR_PREF addr PROFTPD_LOGINERR_SUFF | PROFTPD_LOGINERR_PREF addr PROFTPD_LOGINERR_SUFF | |||
End of changes. 4 change blocks. | ||||
2 lines changed or deleted | 2 lines changed or added |