# HG changeset patch
# User Pascal Bellard <pascal.bellard@slitaz.org>
# Date 1345207802 -7200
# Node ID 6be450c868686289da6f6e8483c9cc218aca8ed1
# Parent  585734d0d3e16961e13ee0f9b94d517717454292
fail2ban: add apache-noscript & apache-proxy

diff -r 585734d0d3e1 -r 6be450c86868 fail2ban/receipt
--- a/fail2ban/receipt	Fri Aug 17 12:21:42 2012 +0200
+++ b/fail2ban/receipt	Fri Aug 17 14:50:02 2012 +0200
@@ -30,11 +30,31 @@
 	sed -i -e 's|127.0.0.1|& 192.168.0.0/16|;s|sshd.log|messages|' \
 		-e '/ssh-iptables/{nn;s/false/true/}' $fs/etc/fail2ban/jail.conf
 	cat >> $fs/etc/fail2ban/jail.conf <<EOT
+[apache-noscript]
+
+enabled  = false
+port     = http,https
+filter   = apache-noscript
+action   = iptables-allports[name=APACHE-NOSCRIPT]
+logpath  = /var/log/apache/*errors
+maxretry = 2
+
+[apache-proxy]
+
+enabled  = false
+port     = http,https
+filter   = apache-proxy
+action   = iptables-allports[name=APACHE-PROXY]
+logpath  = /var/log/apache/*access
+bantime  = 172800
+maxretry = 2
+
 [lighttpd-fastcgi]
 
 enabled  = false
 port     = http,https
 filter   = lighttpd-fastcgi
+action   = iptables-allports[name=LIGHTTPD-FASTCGI]
 logpath  = /var/log/lighttpd/*error*.log
 maxretry = 2
 
diff -r 585734d0d3e1 -r 6be450c86868 fail2ban/stuff/etc/fail2ban/filter.d/apache-noscript.conf
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/fail2ban/stuff/etc/fail2ban/filter.d/apache-noscript.conf	Fri Aug 17 14:50:02 2012 +0200
@@ -0,0 +1,24 @@
+# Fail2Ban configuration file
+#
+# Author: Cyril Jaquier
+#
+# $Revision: 658 $
+#
+
+[Definition]
+
+# Option:  failregex
+# Notes.:  regex to match the password failure messages in the logfile. The
+#          host must be matched by a group named "host". The tag "<HOST>" can
+#          be used for standard IP/hostname matching and is only an alias for
+#          (?:::f{4,6}:)?(?P<host>\S+)
+# Values:  TEXT
+#
+failregex = [[]client <HOST>[]] (File does not exist|script .* not found or unable to stat): .*(\.php|\.asp|\.exe|\.pl)
+            [[]client <HOST>[]] (File does not exist|script .* not found or unable to stat): [^.]*$
+
+# Option:  ignoreregex
+# Notes.:  regex to ignore. If this regex matches, the line is ignored.
+# Values:  TEXT
+#
+ignoreregex = 
diff -r 585734d0d3e1 -r 6be450c86868 fail2ban/stuff/etc/fail2ban/filter.d/apache-proxy.conf
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/fail2ban/stuff/etc/fail2ban/filter.d/apache-proxy.conf	Fri Aug 17 14:50:02 2012 +0200
@@ -0,0 +1,21 @@
+# Fail2Ban configuration file
+#
+# Author: James Roe
+#
+
+[Definition]
+
+# Option:  failregex
+# Notes.:  regex to match the password failure messages in the logfile. The
+#          host must be matched by a group named "host". The tag "<HOST>" can
+#          be used for standard IP/hostname matching and is only an alias for
+#          (?:::f{4,6}:)?(?P<host>\S+)
+# Values:  TEXT
+#
+failregex = ^(?:(?![0-9\.]* - - \[.*\] "([A-Z]* /.* HTTP/1\.[0-9]|-)")<HOST>)
+
+# Option:  ignoreregex
+# Notes.:  regex to ignore. If this regex matches, the line is ignored.
+# Values:  TEXT
+#
+ignoreregex = 
diff -r 585734d0d3e1 -r 6be450c86868 qemacs-tiny/receipt
--- a/qemacs-tiny/receipt	Fri Aug 17 12:21:42 2012 +0200
+++ b/qemacs-tiny/receipt	Fri Aug 17 14:50:02 2012 +0200
@@ -18,18 +18,7 @@
 compile_rules()
 {
 	cd $src
-
-	# quick fix for variable 'XXX' set but not used [-Werror=unused-but-set-variable]
-	sed -i	-e 's/int count,/int count=count,/' \
-		-e 's/ line_count,/ line_count=line_count,/' \
-		-e 's/int len;/int len=len;/' \
-		-e 's/EditState \*e;/EditState *e=e;/' \
-		-e 's/int err,/int err=err,/' qe.c
-	sed -i 's/size_start,/size_start=size_start,/' buffer.c
-	sed -i 's/stack_ptr = 0;/&; stack[0] = stack[0];/' clang.c
-	sed -i 's/len, offset1/len=len, offset1/' latex-mode.c
-	sed -i 's/len1, len2/len1=len1, len2=len2/' dired.c
-	
+	export CFLAGS="-Wno-error=unused-but-set-variable"
 	sed -i 's/\(define SAVED_DATA_SIZE \).*/\1 __builtin_offsetof(EditState,end_of_saved_data)/' qe.h
 	./configure --prefix=/usr --enable-tiny && make qe
 }