HEX
Server: Apache
System: Linux dinesh8149 5.15.98-grsec-sharedvalley-2.lc.el8.x86_64 #1 SMP Thu Mar 9 09:07:30 -03 2023 x86_64
User: usesambura1 (1212012)
PHP: 7.0.33
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: //etc/fail2ban/filter.d/murmur.conf
# Fail2Ban filter for murmur/mumble-server
#

[Definition]

_daemon = murmurd

# N.B. If you allow users to have usernames that include the '>' character you
#      should change this to match the regex assigned to the 'username'
#      variable in your server config file (murmur.ini / mumble-server.ini).
_usernameregex = [^>]+

# Prefix for systemd-journal (with second date-pattern as optional match):
#
__prefix_journal = (?:\S+\s+%(_daemon)s\[\d+\]:(?:\s+\<W\>[\d\-]+ [\d:]+.\d+)?)

__prefix_line = %(__prefix_journal)s?

_prefix = %(__prefix_line)s\s+\d+ => <\d+:%(_usernameregex)s\(-1\)> Rejected connection from <HOST>:\d+:

prefregex = ^%(_prefix)s <F-CONTENT>.+</F-CONTENT>$

failregex = ^Invalid server password$
            ^Wrong certificate or password for existing user$

ignoreregex =

datepattern = ^<W>{DATE}

journalmatch = _SYSTEMD_UNIT=murmurd.service + _COMM=murmurd

# DEV Notes:
#
# Author: Ross Brown