2023-11-07 16:32:45 +01:00
|
|
|
--- src/parser/attack_parser.y.orig 2023-06-27 18:24:17 UTC
|
2018-08-30 13:26:46 -03:00
|
|
|
+++ src/parser/attack_parser.y
|
2023-11-07 16:32:45 +01:00
|
|
|
@@ -113,6 +113,8 @@ static void yyerror(attack_t *, const char *);
|
2019-03-12 16:07:20 -03:00
|
|
|
%token OPENVPN_TLS_ERR_SUFF
|
2019-10-02 20:15:00 -03:00
|
|
|
/* Gitea */
|
|
|
|
|
%token GITEA_ERR_PREF GITEA_ERR_SUFF
|
2018-08-30 13:26:46 -03:00
|
|
|
+/* pfSense GUI authentication failures */
|
|
|
|
|
+%token PFSENSE_AUTH_FAIL
|
2023-11-07 16:32:45 +01:00
|
|
|
/* OpenVPN Portshare */
|
|
|
|
|
%token OPENVPN_PS_TERM_PREF
|
|
|
|
|
%token OPENVPN_PS_TERM_SUFF
|
|
|
|
|
@@ -192,6 +194,7 @@ msg_single:
|
2020-09-21 12:12:59 -05:00
|
|
|
| couriermsg { attack->service = SERVICES_COURIER; }
|
|
|
|
|
| openvpnmsg { attack->service = SERVICES_OPENVPN; }
|
|
|
|
|
| giteamsg { attack->service = SERVICES_GITEA; }
|
|
|
|
|
+ | pfsenseauthfail { attack->service = SERVICES_PFSENSE; }
|
2023-11-07 16:32:45 +01:00
|
|
|
| openvpnpsmsg { attack->service = SERVICES_OPENVPN_PS; }
|
|
|
|
|
| sqlservrmsg { attack->service = SERVICES_MSSQL; }
|
2020-09-21 12:12:59 -05:00
|
|
|
;
|
2023-11-07 16:32:45 +01:00
|
|
|
@@ -351,6 +354,11 @@ opensmtpdmsg:
|
2018-08-30 13:26:46 -03:00
|
|
|
opensmtpdmsg:
|
|
|
|
|
OPENSMTPD_FAILED_CMD_PREF addr OPENSMTPD_AUTHFAIL_SUFF
|
2020-09-21 12:12:59 -05:00
|
|
|
| OPENSMTPD_FAILED_CMD_PREF addr OPENSMTPD_UNSUPPORTED_CMD_SUFF
|
|
|
|
|
+ ;
|
2018-08-30 13:26:46 -03:00
|
|
|
+
|
|
|
|
|
+/* attack rules against pfSense */
|
|
|
|
|
+pfsenseauthfail:
|
|
|
|
|
+ PFSENSE_AUTH_FAIL addr
|
2020-09-21 12:12:59 -05:00
|
|
|
;
|
2018-08-30 13:26:46 -03:00
|
|
|
|
2019-03-12 16:07:20 -03:00
|
|
|
/* attack rules for courier imap/pop */
|