Your message dated Thu, 09 Jul 2009 06:02:04 +0000
with message-id <[email protected]>
and subject line Bug#519557: fixed in fail2ban 0.8.3-6
has caused the Debian Bug report #519557,
regarding fail2ban: filter.d/apache-badbots.conf has duplicate regex element
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
519557: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519557
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: fail2ban
Version: 0.8.3-2sid1
Severity: normal
The regex in filter.d/apache-badbots.conf has two copies of the DataCha0s/2\.0
element. Should only occur once. Here is a patch:
--- /etc/fail2ban/filter.d/apache-badbots.conf.orig 2009-03-13
08:58:29.000000000 -0400
+++ /etc/fail2ban/filter.d/apache-badbots.conf 2009-03-13 08:59:18.000000000
-0400
@@ -11,7 +11,7 @@
[Definition]
badbotscustom = EmailCollector|WebEMailExtrac|TrackBack/1\.02|sogou music
spider
-badbots = atSpider/1\.0|autoemailspider|China Local Browse
2\.6|ContentSmartz|DataCha0s/2\.0|DataCha0s/2\.0|DBrowse 1\.4b|DBrowse
1\.4d|Demo Bot DOT 16b|Demo Bot Z 16b|DSurf15a 01|DSurf15a 71|DSurf15a
81|DSurf15a VA|EBrowse 1\.4b|Educate Search VxB|EmailSiphon|EmailWolf
1\.00|ESurf15a 15|ExtractorPro|Franklin Locator 1\.8|FSurf15a 01|Full Web Bot
0416B|Full Web Bot 0516B|Full Web Bot 2816B|Industry Program 1\.0\.x|ISC
Systems iRc Search 2\.1|IUPUI Research Bot v 1\.9a|LARBIN-EXPERIMENTAL
\(e...@gmx\.net\)|LetsCrawl\.com/1\.0 +http\://letscrawl\.com/|Lincoln State
Web Browser|LWP\:\:Simple/5\.803|Mac Finder 1\.0\.xx|MFC Foundation Class
Library 4\.0|Microsoft URL Control - 6\.00\.8xxx|Missauga Locate
1\.0\.0|Missigua Locator 1\.9|Missouri College Browse|Mizzu Labs 2\.2|Mo
College 1\.9|Mozilla/2\.0 \(compatible; NEWT ActiveX; Win32\)|Mozilla/3\.0
\(compatible; Indy Library\)|Mozilla/4\.0 \(compatible; Advanced Email
Extractor v2\.xx\)|Mozilla/4\.0 \(compatible; Iplexx Spider/1\
.0 http\://www\.iplexx\.at\)|Mozilla/4\.0 \(compatible; MSIE 5\.0; Windows NT;
DigExt; DTS Agent|Mozilla/4\.0 e...@gmx\.net|Mozilla/5\.0 \(Version\: xxxx
Type\:xx\)|MVAClient|NASA Search 1\.0|Nsauditor/1\.x|PBrowse 1\.4b|PEval
1\.4b|Poirot|Port Huron Labs|Production Bot 0116B|Production Bot
2016B|Production Bot DOT 3016B|Program Shareware 1\.0\.2|PSurf15a 11|PSurf15a
51|PSurf15a VA|psycheclone|RSurf15a 41|RSurf15a 51|RSurf15a 81|searchbot
ad...@google\.com|sogou spider|sohu agent|SSurf15a 11 |TSurf15a 11|Under the
Rainbow 2\.2|User-Agent\: Mozilla/4\.0 \(compatible; MSIE 6\.0; Windows NT
5\.1\)|WebVulnCrawl\.blogspot\.com/1\.0 libwww-perl/5\.803|Wells Search II|WEP
Search 00
+badbots = atSpider/1\.0|autoemailspider|China Local Browse
2\.6|ContentSmartz|DataCha0s/2\.0|DBrowse 1\.4b|DBrowse 1\.4d|Demo Bot DOT
16b|Demo Bot Z 16b|DSurf15a 01|DSurf15a 71|DSurf15a 81|DSurf15a VA|EBrowse
1\.4b|Educate Search VxB|EmailSiphon|EmailWolf 1\.00|ESurf15a
15|ExtractorPro|Franklin Locator 1\.8|FSurf15a 01|Full Web Bot 0416B|Full Web
Bot 0516B|Full Web Bot 2816B|Industry Program 1\.0\.x|ISC Systems iRc Search
2\.1|IUPUI Research Bot v 1\.9a|LARBIN-EXPERIMENTAL
\(e...@gmx\.net\)|LetsCrawl\.com/1\.0 +http\://letscrawl\.com/|Lincoln State
Web Browser|LWP\:\:Simple/5\.803|Mac Finder 1\.0\.xx|MFC Foundation Class
Library 4\.0|Microsoft URL Control - 6\.00\.8xxx|Missauga Locate
1\.0\.0|Missigua Locator 1\.9|Missouri College Browse|Mizzu Labs 2\.2|Mo
College 1\.9|Mozilla/2\.0 \(compatible; NEWT ActiveX; Win32\)|Mozilla/3\.0
\(compatible; Indy Library\)|Mozilla/4\.0 \(compatible; Advanced Email
Extractor v2\.xx\)|Mozilla/4\.0 \(compatible; Iplexx Spider/1\.0 http\://www\
.iplexx\.at\)|Mozilla/4\.0 \(compatible; MSIE 5\.0; Windows NT; DigExt; DTS
Agent|Mozilla/4\.0 e...@gmx\.net|Mozilla/5\.0 \(Version\: xxxx
Type\:xx\)|MVAClient|NASA Search 1\.0|Nsauditor/1\.x|PBrowse 1\.4b|PEval
1\.4b|Poirot|Port Huron Labs|Production Bot 0116B|Production Bot
2016B|Production Bot DOT 3016B|Program Shareware 1\.0\.2|PSurf15a 11|PSurf15a
51|PSurf15a VA|psycheclone|RSurf15a 41|RSurf15a 51|RSurf15a 81|searchbot
ad...@google\.com|sogou spider|sohu agent|SSurf15a 11 |TSurf15a 11|Under the
Rainbow 2\.2|User-Agent\: Mozilla/4\.0 \(compatible; MSIE 6\.0; Windows NT
5\.1\)|WebVulnCrawl\.blogspot\.com/1\.0 libwww-perl/5\.803|Wells Search II|WEP
Search 00
# Option: failregex
# Notes.: Regexp to catch known spambots and software alike. Please verify
-- System Information:
Debian Release: 5.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.18-6-xen-686 (SMP w/1 CPU core)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash
Versions of packages fail2ban depends on:
ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip
ii python 2.5.2-3 An interactive high-level object-o
ii python-central 0.6.8 register and build utility for Pyt
Versions of packages fail2ban recommends:
ii iptables 1.4.2-6 administration tools for packet fi
ii whois 4.7.30 an intelligent whois client
Versions of packages fail2ban suggests:
ii bsd-mailx [mailx] 8.1.2-0.20071201cvs-3 A simple mail user agent
ii mailx 1:20071201-3 Transitional package for mailx ren
pn python-gamin <none> (no description available)
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: fail2ban
Source-Version: 0.8.3-6
We believe that the bug you reported is fixed in the latest version of
fail2ban, which is due to be installed in the Debian FTP archive:
fail2ban_0.8.3-6.diff.gz
to pool/main/f/fail2ban/fail2ban_0.8.3-6.diff.gz
fail2ban_0.8.3-6.dsc
to pool/main/f/fail2ban/fail2ban_0.8.3-6.dsc
fail2ban_0.8.3-6_all.deb
to pool/main/f/fail2ban/fail2ban_0.8.3-6_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Yaroslav Halchenko <[email protected]> (supplier of updated fail2ban
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 09 Jul 2009 01:08:40 -0400
Source: fail2ban
Binary: fail2ban
Architecture: source all
Version: 0.8.3-6
Distribution: unstable
Urgency: low
Maintainer: Yaroslav Halchenko <[email protected]>
Changed-By: Yaroslav Halchenko <[email protected]>
Description:
fail2ban - bans IPs that cause multiple authentication errors
Closes: 500824 507986 507990 512193 513953 514163 519557 530078
Changes:
fail2ban (0.8.3-6) unstable; urgency=low
.
* Time to shake the ground with upload to unstable.
* Merged upstream's development as of SVN revision 732:
- Fixed maxretry/findtime rate. Many thanks to Christos Psonis.
Tracker #2019714.
- Made the named-refused regex a bit less restrictive in order to match
logs with "view". Thanks to Stephen Gildea.
- Use timetuple instead of utctimetuple for ISO 8601. Maybe not a 100%
correct fix but seems to work. Tracker #2500276.
- Changed <HOST> template to be more restrictive (closes: #514163).
- Added cyrus-imap and sieve filters. Thanks to Jan Wagner. (closes:
#513953).
- Pull a commit from Yaroslav git repo. BF: addressing added bang to ssh
log (closes: #512193).
- Added missing semi-colon in the bind9 example. Thanks to Yaroslav
Halchenko.
- Added NetBSD ipfilter (ipf command) action. Thanks to Ed Ravin. Tracker
#2484115.
- Improved SASL filter. Thanks to Loic Pefferkorn. Tracker #2310410.
(closes: #507990)
- Added CPanel date format. Thanks to David Collins. Tracker #1967610.
- Added nagios script. Thanks to Sebastian Mueller.
- Removed print.
- Removed begin-line anchor for "standard" timestamp (closes: #500824)
- Remove socket file on startup is fail2ban crashed. Thanks to Detlef
Reichelt.
* Added a comment into Debian-shipped jail.conf about sasl logpath -- it
might preferable to monitor warn.log in case of postfix (To complete react
to #507990) (git branch up/fixes). Also added sasl example log file (git
branch up/log_examples).
* Removing minor bashism in ipmasq example file (closes: #530078).
Thanks Raphael Geissert (git branch up/ipmasq)
* Allow for trailing spaces in proftpd logs (closes: #507986)
(git branch up/fixes).
* Removed duplicate entry for DataCha0s/2\.0 in badbots (closes: #519557)
(git branch up/fixes).
* Adjusted Git-vcs field to point to git:// .
* Thanks lintian fixes:
- Boosted policy to 3.8.2 (no changes are due).
- Boosted debhelper compatibility to 5.
- Misspell in README.Debian
- Removing stale /var/run/fail2ban from dirs -- should be created by
init script
Checksums-Sha1:
1e55684a17db058ab5c2698cec4592a431dd1014 1196 fail2ban_0.8.3-6.dsc
d58a6dc0de62a139127755adfcb5c6c2058d848c 47660 fail2ban_0.8.3-6.diff.gz
d2055e7e153b905a72d9e304d1879e6bd1924592 92332 fail2ban_0.8.3-6_all.deb
Checksums-Sha256:
6f7b0933473b9a2f7a889f4fd5ae8ad91c283fd1ed15b4753da86a2bff8c67b5 1196
fail2ban_0.8.3-6.dsc
3237a4ac043470a519099dc2ed92f4d8571d75ae56fc10ce198747716a120ed0 47660
fail2ban_0.8.3-6.diff.gz
745ffffd51ea92baf9549f0ab5cd1cb1a8a2b50ced5f2e891ce76db2cd97b6d8 92332
fail2ban_0.8.3-6_all.deb
Files:
cbdcc0c552dc9b7531fe8af98c4f11e2 1196 net optional fail2ban_0.8.3-6.dsc
128fb35873a015e58084084a03740224 47660 net optional fail2ban_0.8.3-6.diff.gz
786b3c4a7d3fb2313d6a7c4cde8b831a 92332 net optional fail2ban_0.8.3-6_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkpVhlMACgkQjRFFY3XAJMgR+gCgxr0OhPstTCZhdLpaAYBk+c7t
bLsAnA4R4i4hx5pkYDK3cs90XC7pg6Kt
=OPgc
-----END PGP SIGNATURE-----
--- End Message ---
