Yaroslav Halchenko wrote: > anyways -- have you considered submitting the patch logging *all* failed > IPs against Debian's package of dropbear? may be it could be accepted. > Feel free to provide an argument that it would allow to use fail2ban and > make Debian users more secure. > > why your patch wasn't accepted upstream? or it was never forwarded > upstream?
So, I sent the patch to the upstream author late December 2008. They responded that logging IP's for failed logins seemed like a useful idea and that they would commit that bit. Anyway, I watched the upstream repo and the patch was never committed. I sent a follow up e-mail in September 2009 (just after the dropbear related bug report was filed against fail2ban) seeing if I could get the patch committed, but never received a reply. I never tried submitting it to Debian since I didn't like the idea of fail2ban having rules that only worked against patched versions of Debian packages. Francis -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
