From: <los...@us...> - 2009-02-09 20:27:38
|
Revision: 730 http://fail2ban.svn.sourceforge.net/fail2ban/?rev=730&view=rev Author: lostcontrol Date: 2009-02-09 20:27:35 +0000 (Mon, 09 Feb 2009) Log Message: ----------- - Made the named-refused regex a bit less restrictive in order to match logs with "view". Thanks to Stephen Gildea. Modified Paths: -------------- branches/FAIL2BAN-0_8/ChangeLog branches/FAIL2BAN-0_8/config/filter.d/named-refused.conf Modified: branches/FAIL2BAN-0_8/ChangeLog =================================================================== --- branches/FAIL2BAN-0_8/ChangeLog 2009-02-08 19:50:44 UTC (rev 729) +++ branches/FAIL2BAN-0_8/ChangeLog 2009-02-09 20:27:35 UTC (rev 730) @@ -37,6 +37,8 @@ #514163. - Use timetuple instead of utctimetuple for ISO 8601. Maybe not a 100% correct fix but seems to work. Tracker #2500276. +- Made the named-refused regex a bit less restrictive in + order to match logs with "view". Thanks to Stephen Gildea. ver. 0.8.3 (2008/07/17) - stable ---------- Modified: branches/FAIL2BAN-0_8/config/filter.d/named-refused.conf =================================================================== --- branches/FAIL2BAN-0_8/config/filter.d/named-refused.conf 2009-02-08 19:50:44 UTC (rev 729) +++ branches/FAIL2BAN-0_8/config/filter.d/named-refused.conf 2009-02-09 20:27:35 UTC (rev 730) @@ -26,7 +26,7 @@ # Notes.: regex to match the password failures messages in the logfile. # Values: TEXT # -failregex = %(__line_prefix)sclient <HOST>#\S+: query(?: \(cache\))? '.*' denied\s*$ +failregex = %(__line_prefix)sclient <HOST>#.+: query(?: \(cache\))? '.*' denied\s*$ # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored. This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |