Update default settings for RHEL 5.3

RHEL ES 3 is now very old, so update the default settings to suit RHEL
5.3.

The only substantive change is that the illegal_user_regex variable has
been tweaked (error messages now refer to "invalid user" rather than
"illegal user".

Signed-off-by: Wincent Colaiuta <win@wincent.com>

diff --git a/bansshee b/bansshee
index ec26d5e49ac8e71d0b9b9f87f4ee91f4ef8c26d1..7a0b85ebb1b7083d226cf2923bce0a9340461bc1 100755 (executable)
--- a/bansshee
+++ b/bansshee
@@ -17,16 +17,16 @@ use File::Tail;
 #
 
 my $config_file               = "/etc/bansshee.conf";
-our $permitted_illegal_user   = 5;      # number of illegal user attempts permitted from a single IP address before it gets blocked 
+our $permitted_illegal_user   = 5;      # number of invalid user attempts permitted from a single IP address before it gets blocked
 our $permitted_incorrect_pass = 5;      # number of incorrect pass attempts permitted from a single IP address before it gets blocked
-our $unban_wait               = 3600;   # minimum number of seconds an IP must wait before it gets removed from the blocklist (1 hour) 
-our $grace_period             = 3600;   # number of seconds that must pass before prior illegal/incorrect attempt counts are reset (1 hour)
+our $unban_wait               = 3600;   # minimum number of seconds an IP must wait before it gets removed from the blocklist (1 hour)
+our $grace_period             = 3600;   # number of seconds that must pass before prior invalid/incorrect attempt counts are reset (1 hour)
 our $unblocking_interval      = 300;    # number of seconds between checks of the blocklist for removing old IPs (5 minutes)
 
-# Platform specific settings, based on Red Hat Enterprise Linux ES release 3 (Taroon Update 7)
+# Platform specific settings, based on Red Hat Enterprise Linux 5.3
 
 our $logpath                  = '/var/log/secure';                         # logfile to watch
-our $illegal_user_regex       = 'sshd\[\d+\]: Failed password for illegal user (\S+) from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) port \d+ ssh';
+our $illegal_user_regex       = 'sshd\[\d+\]: Failed password for invalid user (\S+) from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) port \d+ ssh';
 our $incorrect_pass_regex     = 'sshd\[\d+\]: Failed password for (\S+) from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) port \d+ ssh';
 our $iptables                 = '/sbin/iptables';                          # for manipulating the firewall
 our $iptables_create          = '-N BANSSHEE';                             # iptables parameters for creating the BANSSHEE chain

diff --git a/bansshee.conf b/bansshee.conf
index 8690e616c3ada7fe5bea49613ae8869e4870e356..c051570073bfdcb715621b0667e4511e79fb0652 100644 (file)
--- a/bansshee.conf
+++ b/bansshee.conf
@@ -5,18 +5,18 @@
 # General settings
 #
 
-#our $permitted_illegal_user    = 5;      # number of illegal user attempts permitted from a single IP address before it gets blocked 
+#our $permitted_illegal_user    = 5;      # number of invalid user attempts permitted from a single IP address before it gets blocked
 #our $permitted_incorrect_pass  = 5;      # number of incorrect pass attempts permitted from a single IP address before it gets blocked
-#our $unban_wait                = 3600;   # minimum number of seconds an IP must wait before it gets removed from the blocklist (1 hour) 
-#our $grace_period              = 3600;   # number of seconds that must pass before prior illegal/incorrect attempt counts are reset (1 hour)
+#our $unban_wait                = 3600;   # minimum number of seconds an IP must wait before it gets removed from the blocklist (1 hour)
+#our $grace_period              = 3600;   # number of seconds that must pass before prior invalid/incorrect attempt counts are reset (1 hour)
 #our $unblocking_interval       = 300;    # number of seconds between checks of the blocklist for removing old IPs (5 minutes)
 
 #
-# Platform specific settings: based on Red Hat Enterprise Linux ES release 3 (Taroon Update 7)
+# Platform specific settings: based on Red Hat Enterprise Linux 5.3
 #
 
 #our $logpath                   = '/var/log/secure';                        # logfile to watch
-#our $illegal_user_regex        = 'sshd\[\d+\]: Failed password for illegal user (\S+) from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) port \d+ ssh';
+#our $illegal_user_regex        = 'sshd\[\d+\]: Failed password for invalid user (\S+) from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) port \d+ ssh';
 #our $incorrect_pass_regex      = 'sshd\[\d+\]: Failed password for (\S+) from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}) port \d+ ssh';
 #our $iptables                  = '/sbin/iptables';                         # for manipulating the firewall
 #our $iptables_create          = '-N BANSSHEE';                             # iptables parameters for creating the BANSSHEE chain