Menu

#59 alphanumeric date format -> fail2ban doesnt know this

open
nobody
None
5
2011-03-17
2011-03-17
No

If there is a date format like:
[Mar 13 03:34:41] WARNING[1094] chan_sip.c: Bad request protocol password@1.2.3.4 SIP/2.0

the fail2ban regex will not check this and nothing will hapen with the iptables...

fail2ban needs this date format:
[2011-03-16 14:37:53] NOTICE[20226] chan_sip.c: Registration from '<sip:671@1.2.3.4>' failed for '0.0.0.0' - No matching peer found

Fail2ban needs a numeric date format, if there is a alphanumeric date format, there is no error message in the fail2ban log file...and you think it is working...but it isnt!

I think there should be a date format check script and an output to the fail2ban log file with an information that the date format isnt correct.

Discussion


Log in to post a comment.