aboutsummaryrefslogtreecommitdiff
path: root/security/denyhosts
diff options
context:
space:
mode:
authorRong-En Fan <rafan@FreeBSD.org>2007-06-23 06:35:16 +0000
committerRong-En Fan <rafan@FreeBSD.org>2007-06-23 06:35:16 +0000
commitd7933bb2826c6c1dd73a2cca6d13f5af2361854c (patch)
tree118866f2aa119a9ff7eda89258baa32e7b94b7ee /security/denyhosts
parent643ca90bfd3064ff8069de9918899d7a46a6c2de (diff)
downloadports-d7933bb2826c6c1dd73a2cca6d13f5af2361854c.tar.gz
ports-d7933bb2826c6c1dd73a2cca6d13f5af2361854c.zip
- Fix a DoS issue
PR: ports/113942 Security: http://www.ossec.net/en/attacking-loganalysis.html#denyhosts Submitted by: David Bestor <freebsd1 at indenial.com> Approved by: Janos Mohacsi <mohacsi at niif.hu> (maintainer)
Notes
Notes: svn path=/head/; revision=194109
Diffstat (limited to 'security/denyhosts')
-rw-r--r--security/denyhosts/Makefile1
-rw-r--r--security/denyhosts/files/patch-DenyHosts_regex.py11
2 files changed, 12 insertions, 0 deletions
diff --git a/security/denyhosts/Makefile b/security/denyhosts/Makefile
index 1c4e38473047..328840e3f1d3 100644
--- a/security/denyhosts/Makefile
+++ b/security/denyhosts/Makefile
@@ -7,6 +7,7 @@
PORTNAME= denyhosts
PORTVERSION= 2.6
+PORTREVISION= 1
CATEGORIES= security
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE}
MASTER_SITE_SUBDIR= ${PORTNAME}
diff --git a/security/denyhosts/files/patch-DenyHosts_regex.py b/security/denyhosts/files/patch-DenyHosts_regex.py
new file mode 100644
index 000000000000..4c56fb519112
--- /dev/null
+++ b/security/denyhosts/files/patch-DenyHosts_regex.py
@@ -0,0 +1,11 @@
+--- DenyHosts/regex.py.orig Sat Jun 23 14:32:34 2007
++++ DenyHosts/regex.py Sat Jun 23 14:32:58 2007
+@@ -17,7 +17,7 @@
+
+ FAILED_ENTRY_REGEX4 = re.compile(r"""Authentication failure for (?P<user>.*) .*from (?P<host>.*)""")
+
+-FAILED_ENTRY_REGEX5 = re.compile(r"""User (?P<user>.*) .*from (?P<host>.*) not allowed because none of user's groups are listed in AllowGroups""")
++FAILED_ENTRY_REGEX5 = re.compile(r"""User (?P<user>.*) .*from (?P<host>.*) not allowed because none of user's groups are listed in AllowGroups$""")
+
+ FAILED_ENTRY_REGEX6 = re.compile(r"""Did not receive identification string .*from (::ffff:)?(?P<host>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})""")
+