Re: [Denyhosts-user] Denyhosts for VSFTPD not blocking, again...

[David R. <ro...@ha...>]

On Wed, 12 Sep 2007, Dan Denton wrote:

> After some research and messing around, I'm reasonable sure the problem is
> with the regex.

Based on the log snippet you included in your mail, I think the regex you 
want is:

.* vsftpd.* authentication failure.* rhost=(?P<host>\S+)

Rene's regex is also looking for the ' user=' information, which you don't 
appear to be logging.

-- D