From: Xuo <xu...@fr...> - 2010-07-14 12:02:09
|
Hi, I probably send this mail twice but I had an error when I sent the first one. I use fail2ban version v0.8.4 with proftpd. The proftpd log file has its time defined in french format (juil. instead of jul for instance). I don't know yet how to make proftpd to create log files with other date format. If I run fail2ban-regex after I replace all "juil." by "jul", all errors are detected by fail2ban. With french date format, none is detected and I get the following error message : Found a match for 'ju ordi4 proftpd[15697] ordi4 (<IP Address>.fbx.proxad.net[<IP Address>]): USER ftpuser (Login failed): Incorrect password. ' but no valid date/time found for 'il. 12 21:30:40'. Please contact the author in order to get support for this format fail2ban is started with : /etc/init.d/fail2ban start as user root. The locale used is the following : /etc/fail2ban 345 # locale LANG=fr_FR.UTF-8 LC_CTYPE=fr_FR.UTF-8 LC_NUMERIC=fr_FR.UTF-8 LC_TIME=fr_FR.UTF-8 LC_COLLATE=fr_FR.UTF-8 LC_MONETARY=fr_FR.UTF-8 LC_MESSAGES=fr_FR.UTF-8 LC_PAPER=fr_FR.UTF-8 LC_NAME=fr_FR.UTF-8 LC_ADDRESS=fr_FR.UTF-8 LC_TELEPHONE=fr_FR.UTF-8 LC_MEASUREMENT=fr_FR.UTF-8 LC_IDENTIFICATION=fr_FR.UTF-8 LC_ALL= Why does fail2ban seem to understand only C or en_US locale ? Is there a way to force fail2ban to use user's locale ? Is there a way to force fail2ban to use user's locale on a per <JAIL> basis (one for sshd, one for proftpd, ...). Regards. Xuo. |