Gecko [ www.foryou-vip.com ]

Name	Size	Permission	Date
ignorecommands	[ DIR ]	drwxr-xr-x	2022-11-21 13:39
3proxy.conf	442 B	-rw-r--r--	2016-12-09 15:48
apache-antibot.conf	576 B	-rw-r--r--	2022-12-15 12:19
apache-auth.conf	3.17 KB	-rw-r--r--	2016-12-09 15:48
apache-badbots.conf	2.68 KB	-rw-r--r--	2016-12-09 15:48
apache-botsearch.conf	1.24 KB	-rw-r--r--	2016-12-09 15:48
apache-common.conf	813 B	-rw-r--r--	2016-12-09 15:48
apache-fakegooglebot.conf	268 B	-rw-r--r--	2016-12-09 15:48
apache-get-dos.conf	680 B	-rw-r--r--	2022-11-22 18:57
apache-modsecurity.conf	487 B	-rw-r--r--	2016-12-09 15:48
apache-nohome.conf	596 B	-rw-r--r--	2016-12-09 15:48
apache-noscript.conf	1.16 KB	-rw-r--r--	2016-12-09 15:48
apache-overflows.conf	1.95 KB	-rw-r--r--	2016-12-09 15:48
apache-pass.conf	346 B	-rw-r--r--	2016-12-09 15:48
apache-shellshock.conf	1014 B	-rw-r--r--	2016-12-09 15:48
assp.conf	3.34 KB	-rw-r--r--	2016-12-09 15:48
asterisk.conf	2.39 KB	-rw-r--r--	2016-12-09 15:48
botsearch-common.conf	520 B	-rw-r--r--	2016-12-09 15:48
common.conf	1.82 KB	-rw-r--r--	2016-12-09 15:48
counter-strike.conf	252 B	-rw-r--r--	2016-12-09 15:48
courier-auth.conf	393 B	-rw-r--r--	2016-12-09 15:48
courier-smtp.conf	490 B	-rw-r--r--	2016-12-09 15:48
custom-iptables.conf	212 B	-rw-r--r--	2023-03-10 12:17
cyrus-imap.conf	443 B	-rw-r--r--	2016-12-09 15:48
directadmin.conf	345 B	-rw-r--r--	2016-12-09 15:48
dolibarr-forgot.conf	113 B	-rw-r--r--	2025-11-25 11:03
dovecot.conf	1.83 KB	-rw-r--r--	2016-12-09 15:48
dropbear.conf	1.66 KB	-rw-r--r--	2016-12-09 15:48
drupal-auth.conf	557 B	-rw-r--r--	2016-12-09 15:48
ejabberd-auth.conf	1.25 KB	-rw-r--r--	2016-12-09 15:48
exim-common.conf	423 B	-rw-r--r--	2016-12-09 15:48
exim-spam.conf	2.11 KB	-rw-r--r--	2016-12-09 15:48
exim.conf	1.77 KB	-rw-r--r--	2016-12-09 15:48
freeswitch.conf	963 B	-rw-r--r--	2016-12-09 15:48
froxlor-auth.conf	1.18 KB	-rw-r--r--	2016-12-09 15:48
groupoffice.conf	236 B	-rw-r--r--	2016-12-09 15:48
gssftpd.conf	322 B	-rw-r--r--	2016-12-09 15:48
guacamole.conf	512 B	-rw-r--r--	2016-12-09 15:48
haproxy-http-auth.conf	1.13 KB	-rw-r--r--	2016-12-09 15:48
horde.conf	404 B	-rw-r--r--	2016-12-09 15:48
kerio.conf	482 B	-rw-r--r--	2016-12-09 15:48
lighttpd-auth.conf	323 B	-rw-r--r--	2016-12-09 15:48
mongodb-auth.conf	2.23 KB	-rw-r--r--	2016-12-09 15:48
monit.conf	773 B	-rw-r--r--	2016-12-09 15:48
murmur.conf	652 B	-rw-r--r--	2016-12-09 15:48
mysqld-auth.conf	891 B	-rw-r--r--	2016-12-09 15:48
nagios.conf	400 B	-rw-r--r--	2016-12-09 15:48
named-refused.conf	1.56 KB	-rw-r--r--	2016-12-09 15:48
nginx-auth.conf	143 B	-rw-r--r--	2023-03-10 12:20
nginx-botsearch.conf	528 B	-rw-r--r--	2016-12-09 15:48
nginx-http-auth.conf	442 B	-rw-r--r--	2016-12-09 15:48
nginx-limit-req.conf	1.39 KB	-rw-r--r--	2016-12-09 15:48
nsd.conf	707 B	-rw-r--r--	2016-12-09 15:48
openhab.conf	459 B	-rw-r--r--	2016-12-09 15:48
openwebmail.conf	495 B	-rw-r--r--	2016-12-09 15:48
oracleims.conf	1.86 KB	-rw-r--r--	2016-12-09 15:48
pam-generic.conf	814 B	-rw-r--r--	2016-12-09 15:48
perdition.conf	568 B	-rw-r--r--	2016-12-09 15:48
php-url-fopen.conf	834 B	-rw-r--r--	2016-12-09 15:48
portsentry.conf	188 B	-rw-r--r--	2016-12-09 15:48
postfix-rbl.conf	454 B	-rw-r--r--	2016-12-09 15:48
postfix-sasl.conf	482 B	-rw-r--r--	2016-12-09 15:48
postfix.conf	1.26 KB	-rw-r--r--	2016-12-09 15:48
proftpd.conf	1.19 KB	-rw-r--r--	2016-12-09 15:48
pure-ftpd.conf	2.35 KB	-rw-r--r--	2016-12-09 15:48
qmail.conf	795 B	-rw-r--r--	2016-12-09 15:48
recidive.conf	1.26 KB	-rw-r--r--	2016-12-09 15:48
roundcube-auth.conf	1.33 KB	-rw-r--r--	2016-12-09 15:48
screensharingd.conf	821 B	-rw-r--r--	2016-12-09 15:48
selinux-common.conf	517 B	-rw-r--r--	2016-12-09 15:48
selinux-ssh.conf	570 B	-rw-r--r--	2016-12-09 15:48
sendmail-auth.conf	330 B	-rw-r--r--	2016-12-09 15:48
sendmail-reject.conf	2.37 KB	-rw-r--r--	2016-12-09 15:48
sieve.conf	371 B	-rw-r--r--	2016-12-09 15:48
slapd.conf	706 B	-rw-r--r--	2016-12-09 15:48
sogo-auth.conf	472 B	-rw-r--r--	2016-12-09 15:48
solid-pop3d.conf	1.07 KB	-rw-r--r--	2016-12-09 15:48
squid.conf	206 B	-rw-r--r--	2016-12-09 15:48
squirrelmail.conf	199 B	-rw-r--r--	2016-12-09 15:48
sshd-ddos.conf	761 B	-rw-r--r--	2016-12-09 15:48
sshd.conf	3.09 KB	-rw-r--r--	2016-12-09 15:48
stunnel.conf	363 B	-rw-r--r--	2016-12-09 15:48
suhosin.conf	645 B	-rw-r--r--	2016-12-09 15:48
tine20.conf	821 B	-rw-r--r--	2016-12-09 15:48
uwimap-auth.conf	374 B	-rw-r--r--	2016-12-09 15:48
vsftpd.conf	637 B	-rw-r--r--	2016-12-09 15:48
webmin-auth.conf	444 B	-rw-r--r--	2016-12-09 15:48
wuftpd.conf	520 B	-rw-r--r--	2016-12-09 15:48
xinetd-fail.conf	503 B	-rw-r--r--	2016-12-09 15:48

Rename

# Fail2Ban apache-auth filter
#

[INCLUDES]

# Read common prefixes. If any customizations available -- read them from
# apache-common.local
before = apache-common.conf

[Definition]

failregex = ^%(_apache_error_client)s (AH(01797|01630): )?client denied by server configuration: (uri )?\S*(, referer: \S+)?\s*$
            ^%(_apache_error_client)s (AH01617: )?user .*? authentication failure for "\S*": Password Mismatch(, referer: \S+)?$
            ^%(_apache_error_client)s (AH01618: )?user .*? not found(: )?\S*(, referer: \S+)?\s*$
            ^%(_apache_error_client)s (AH01614: )?client used wrong authentication scheme: \S*(, referer: \S+)?\s*$
            ^%(_apache_error_client)s (AH\d+: )?Authorization of user \S+ to access \S* failed, reason: .*$
            ^%(_apache_error_client)s (AH0179[24]: )?(Digest: )?user .*?: password mismatch: \S*(, referer: \S+)?\s*$
            ^%(_apache_error_client)s (AH0179[01]: |Digest: )user `.*?' in realm `.+' (not found|denied by provider): \S*(, referer: \S+)?\s*$
            ^%(_apache_error_client)s (AH01631: )?user .*?: authorization failure for "\S*":(, referer: \S+)?\s*$
            ^%(_apache_error_client)s (AH01775: )?(Digest: )?invalid nonce .* received - length is not \S+(, referer: \S+)?\s*$
            ^%(_apache_error_client)s (AH01788: )?(Digest: )?realm mismatch - got `.*?' but expected `.+'(, referer: \S+)?\s*$
            ^%(_apache_error_client)s (AH01789: )?(Digest: )?unknown algorithm `.*?' received: \S*(, referer: \S+)?\s*$
            ^%(_apache_error_client)s (AH01793: )?invalid qop `.*?' received: \S*(, referer: \S+)?\s*$
            ^%(_apache_error_client)s (AH01777: )?(Digest: )?invalid nonce .*? received - user attempted time travel(, referer: \S+)?\s*$

ignoreregex =

# DEV Notes:
#
# This filter matches the authorization failures of Apache. It takes the log messages
# from the modules in aaa that return HTTP_UNAUTHORIZED, HTTP_METHOD_NOT_ALLOWED or
# HTTP_FORBIDDEN and not AUTH_GENERAL_ERROR or HTTP_INTERNAL_SERVER_ERROR.
#
# An unauthorized response 401 is the first step for a browser to instigate authentication
# however apache doesn't log this as an error. Only subsequent errors are logged in the 
# error log.
#
# Source:
#
# By searching the code in http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/aaa/*
# for ap_log_rerror(APLOG_MARK, APLOG_ERR and examining resulting return code should get
# all of these expressions. Lots of submodules like mod_authz_* return back to mod_authz_core
# to return the actual failure.
#
# See also: http://wiki.apache.org/httpd/ListOfErrors
# Expressions that don't have tests and aren't common.
# more be added with  https://issues.apache.org/bugzilla/show_bug.cgi?id=55284 
#     ^%(_apache_error_client)s (AH01778: )?user .*: nonce expired $[\d.]+ seconds old - max lifetime [\d.]+$ - sending new nonce\s*$
#     ^%(_apache_error_client)s (AH01779: )?user .*: one-time-nonce mismatch - sending new nonce\s*$
#     ^%(_apache_error_client)s (AH02486: )?realm mismatch - got `.*' but no realm specified\s*$
#
# referer is always in error log messages if it exists added as per the log_error_core function in server/log.c
# 
# Author: Cyril Jaquier
# Major edits by Daniel Black