Files

32 lines
1.1 KiB
Plaintext
Raw Permalink Normal View History

2023-11-07 16:32:45 +01:00
--- src/parser/attack_parser.y.orig 2023-06-27 18:24:17 UTC
+++ src/parser/attack_parser.y
2023-11-07 16:32:45 +01:00
@@ -113,6 +113,8 @@ static void yyerror(attack_t *, const char *);
2019-03-12 16:07:20 -03:00
%token OPENVPN_TLS_ERR_SUFF
/* Gitea */
%token GITEA_ERR_PREF GITEA_ERR_SUFF
+/* pfSense GUI authentication failures */
+%token PFSENSE_AUTH_FAIL
2023-11-07 16:32:45 +01:00
/* OpenVPN Portshare */
%token OPENVPN_PS_TERM_PREF
%token OPENVPN_PS_TERM_SUFF
@@ -192,6 +194,7 @@ msg_single:
2020-09-21 12:12:59 -05:00
| couriermsg { attack->service = SERVICES_COURIER; }
| openvpnmsg { attack->service = SERVICES_OPENVPN; }
| giteamsg { attack->service = SERVICES_GITEA; }
+ | pfsenseauthfail { attack->service = SERVICES_PFSENSE; }
2023-11-07 16:32:45 +01:00
| openvpnpsmsg { attack->service = SERVICES_OPENVPN_PS; }
| sqlservrmsg { attack->service = SERVICES_MSSQL; }
2020-09-21 12:12:59 -05:00
;
2023-11-07 16:32:45 +01:00
@@ -351,6 +354,11 @@ opensmtpdmsg:
opensmtpdmsg:
OPENSMTPD_FAILED_CMD_PREF addr OPENSMTPD_AUTHFAIL_SUFF
2020-09-21 12:12:59 -05:00
| OPENSMTPD_FAILED_CMD_PREF addr OPENSMTPD_UNSUPPORTED_CMD_SUFF
+ ;
+
+/* attack rules against pfSense */
+pfsenseauthfail:
+ PFSENSE_AUTH_FAIL addr
2020-09-21 12:12:59 -05:00
;
2019-03-12 16:07:20 -03:00
/* attack rules for courier imap/pop */