Detect and ban port scanners as well as other forms of abuse (closes #820)
This commit is contained in:
@@ -854,7 +854,7 @@ impl EventType {
|
||||
EventType::Tls(TlsEvent::NoCertificatesAvailable) => 546,
|
||||
EventType::Tls(TlsEvent::NotConfigured) => 547,
|
||||
EventType::Telemetry(TelemetryEvent::Alert) => 548,
|
||||
EventType::Security(SecurityEvent::BruteForceBan) => 549,
|
||||
EventType::Security(SecurityEvent::AbuseBan) => 549,
|
||||
EventType::Security(SecurityEvent::LoiterBan) => 550,
|
||||
EventType::Smtp(SmtpEvent::MailFromNotAllowed) => 551,
|
||||
EventType::Security(SecurityEvent::Unauthorized) => 552,
|
||||
@@ -863,6 +863,7 @@ impl EventType {
|
||||
EventType::Auth(AuthEvent::ClientRegistration) => 555,
|
||||
EventType::Ai(AiEvent::LlmResponse) => 556,
|
||||
EventType::Ai(AiEvent::ApiError) => 557,
|
||||
EventType::Security(SecurityEvent::ScanBan) => 558,
|
||||
}
|
||||
}
|
||||
|
||||
@@ -1457,7 +1458,7 @@ impl EventType {
|
||||
546 => Some(EventType::Tls(TlsEvent::NoCertificatesAvailable)),
|
||||
547 => Some(EventType::Tls(TlsEvent::NotConfigured)),
|
||||
548 => Some(EventType::Telemetry(TelemetryEvent::Alert)),
|
||||
549 => Some(EventType::Security(SecurityEvent::BruteForceBan)),
|
||||
549 => Some(EventType::Security(SecurityEvent::AbuseBan)),
|
||||
550 => Some(EventType::Security(SecurityEvent::LoiterBan)),
|
||||
551 => Some(EventType::Smtp(SmtpEvent::MailFromNotAllowed)),
|
||||
552 => Some(EventType::Security(SecurityEvent::Unauthorized)),
|
||||
@@ -1466,6 +1467,7 @@ impl EventType {
|
||||
555 => Some(EventType::Auth(AuthEvent::ClientRegistration)),
|
||||
556 => Some(EventType::Ai(AiEvent::LlmResponse)),
|
||||
557 => Some(EventType::Ai(AiEvent::ApiError)),
|
||||
558 => Some(EventType::Security(SecurityEvent::ScanBan)),
|
||||
_ => None,
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user