Re: [OpenIndiana-discuss] fail2ban for sshd

2014-04-24 Thread Gary Gendel
Oscar, Thanks for the tip. I'd have to figure out how to do the "__prefix_line" substitution using fail2ban-regex. I tried your filter and it caught all the ones that were missed before. Now I know if things slip through that it's not the fault of the filter. Gary On 04/24/2014 11:43 AM,

Re: [OpenIndiana-discuss] fail2ban for sshd

2014-04-24 Thread Oscar del Rio
On 04/24/14 06:43 AM, Gary Gendel wrote: Fail2ban seems to randomly miss ssh matches. I've been hacking at the filter but nothing I seem to do works. What regex are others using that works? The line that should catch the ones missed is: ^%(__prefix_line)s\[.*\] Failed (?:password|publickey

Re: [OpenIndiana-discuss] [oi-dev] Hipster and custom illumos-gate

2014-04-24 Thread Jim Klimov
Sorry for the noise, I forgot to un-sticky the original hipster publisher: pkg -R /a set-publisher --non-sticky openindiana.org Just in case I've also redefined my (file-based) on-nightly repo as preferred (-P -g) and now the update went fast and onto my own gate build :) Thanks for the sugges

Re: [OpenIndiana-discuss] [oi-dev] Hipster and custom illumos-gate

2014-04-24 Thread Alexander Pyhalov
On 04/24/2014 18:53, Jim Klimov wrote: So... based on this suggestion, the hipster illumos-gate makefile, and some earlier list posts, I came up with this change to my illumos.sh script: # To enable upgrades over `pkg info osnet-incorporation | grep Branch:` # Branch: 0.151.1 #export ONNV_BUI

Re: [OpenIndiana-discuss] fail2ban for sshd

2014-04-24 Thread Jerry Kemp
Hello Gary, I don't have an answer on your fail2ban issue, but if you aren't able to resolve it, I am doing exceedingly well with a product called "denyhost". http://denyhosts.sourceforge.net/ Jerry Kemp On 04/24/14 05:43 AM, Gary Gendel wrote: Fail2ban seems to randomly miss ssh matches.

Re: [OpenIndiana-discuss] [oi-dev] Hipster and custom illumos-gate

2014-04-24 Thread Jim Klimov
So... based on this suggestion, the hipster illumos-gate makefile, and some earlier list posts, I came up with this change to my illumos.sh script: # To enable upgrades over `pkg info osnet-incorporation | grep Branch:` # Branch: 0.151.1 #export ONNV_BUILDNUM=152 #export ONNV_BUILDNUM=151.1.100

Re: [OpenIndiana-discuss] fail2ban for sshd

2014-04-24 Thread Schweiss, Chip
On Thu, Apr 24, 2014 at 5:43 AM, Gary Gendel wrote: > Fail2ban seems to randomly miss ssh matches. I've been hacking at the > filter but nothing I seem to do works. What regex are others using that > works? The line that should catch the ones missed is: > > A much easier way to manage this is n

Re: [OpenIndiana-discuss] yahoo DMARC policy problem

2014-04-24 Thread Jim Klimov
Hello all, Posting this on behalf of Reg, since he couldn't get his message to the OI lists anymore. http://comments.gmane.org/gmane.os.illumos.general/2478 I myself am not sure what else may be done beside the changes that apparently already took place, at least in some of the lists. Since

[OpenIndiana-discuss] fail2ban for sshd

2014-04-24 Thread Gary Gendel
Fail2ban seems to randomly miss ssh matches. I've been hacking at the filter but nothing I seem to do works. What regex are others using that works? The line that should catch the ones missed is: ^%(__prefix_line)s\[.*\] Failed (?:password|publickey|none|keyboard-interactive) for .* from \s*

Re: [OpenIndiana-discuss] [oi-dev] Hipster and custom illumos-gate

2014-04-24 Thread Alexander Pyhalov
Hi, Jim. On 04/24/2014 02:45, Jim Klimov wrote: After completing a build I am suddenly stuck trying to install the newer illumos-gate packages into a new BE: their versioning (0.151.1.100 per my arbitrarily big choice) is less than Hipster's (2014.*, without even a leading zero which is auto