Fail2Ban

Hi,

I am trying to get an custom filter working, but fail2ban won´t
recongnize the login attempts. I posted summary
on http://pastebin.com/HQSuZneH

Thanks forward.
Regards

Re: [Fail2ban-users] custom filter won´t work From: www.blocklist.de <root@bl...> - 2012-06-27 23:27 Hi R., you can try the following regex: failregex = ^::ffff:<HOST>.* - .* "GET /login_up\.php3\?login_name a other User hase the same problem at the same time and there regex works find ;-) -- best regards Martin http://www.blocklist.de Fail2Ban Reporting Service Web: https://www.blocklist.de Forum: https://forum.blocklist.de Am 27.06.2012 15:13, schrieb R. Jung: > Hi, > > I am trying to get an custom filter working, but fail2ban won´t > recongnize the login attempts. I posted summary > on http://pastebin.com/HQSuZneH > > Thanks forward. > Regards > > > ------------------------------------------------------------------------------ > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. Discussions > will include endpoint security, mobile security and the latest in malware > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > _______________________________________________ > Fail2ban-users mailing list > Fail2ban-users@... > https://lists.sourceforge.net/lists/listinfo/fail2ban-users >

Re: [Fail2ban-users] custom filter won´t work From: Yaroslav Halchenko <lists@on...> - 2012-06-28 05:06 On Thu, 28 Jun 2012, http://www.blocklist.de wrote: > you can try the following regex: > failregex = ^::ffff:<HOST>.* - .* "GET /login_up\.php3\?login_name just a minor note: iirc <HOST> has ::ffff: in it... ... yeap server/failregex.py: regex = regex.replace("<HOST>", "(?:::f{4,6}:)?(?P<host>[\w\-.^_]+)") so -- since it is optional, no harm would be done, but it is not needed -- Yaroslav O. Halchenko Postdoctoral Fellow, Department of Psychological and Brain Sciences Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755 Phone: +1 (603) 646-9834 Fax: +1 (603) 646-1419 WWW: http://www.linkedin.com/in/yarik

Re: [Fail2ban-users] custom filter won´t work From: R. Jung <rerjung@o2...> - 2012-06-28 10:14 Hi Martin, Hi Yaroslav O. Halchenko, I really appreciate your help and suggestions, which helped me to get an working filter :-)

1 message has been excluded from this view by a project administrator.