From b09f74116b09dd0697c1ecc6e94f4631b37c0ad7 Mon Sep 17 00:00:00 2001
From: Oliver Ladner <waste@lugh.ch>
Date: Wed, 22 May 2013 09:09:09 +0200
Subject: [PATCH] =?UTF-8?q?added=20Apache2=20Digest=20Auth=20filter=20(Cop?=
 =?UTF-8?q?yright=20Emre=20Sevin=C3=A7)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 apache-digest.conf | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 apache-digest.conf

diff --git a/apache-digest.conf b/apache-digest.conf
new file mode 100644
index 0000000..3a36df3
--- /dev/null
+++ b/apache-digest.conf
@@ -0,0 +1,21 @@
+# Fail2Ban configuration file
+#
+# Author: Emre Sevinç
+
+[Definition]
+
+# Option:  failregex
+# Notes.:  regex to match Digest Auth requests for unknown users and failed logins
+#          host must be matched by a group named "host". The tag "<HOST>" can
+#          be used for standard IP/hostname matching and is only an alias for
+#          (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
+# Values:  TEXT
+#
+
+failregex = [[]client <HOST>[]] (Digest: )?user .* (authentication failure|not found|password mismatch)
+
+# Option:  ignoreregex
+# Notes.:  regex to ignore. If this regex matches, the line is ignored.
+# Values:  TEXT
+#
+ignoreregex =