Re: [Fail2ban-users] Fail2ban and logs in french.

[René B. <rb...@ca...>]

On 9/28/2010 1:32 PM, Xuo wrote:

> You have found the problem.
> By default, proftpd writes its logs via syslog (see
> http://www.proftpd.org/docs/howto/Logging.html).
> But in my /etc/proftpd.conf file, there was the 2 following lines that I
> commented out :
> #TransferLog
> /var/log/proftpd/proftpd.log                                                                                       
> 
> #SystemLog   /var/log/proftpd/proftpd.log 
> Now, error messages are written into /var/log/syslog in (what I call)
> english format and fail2ban is able to ban bad IP addresses.
> 
> I still have a question : when you say fail2ban is able to recognize
> french, why didn't it recognize "sept." ? Is it the 'dot' that is not
> correct ?
> I think 'sept.' comes from my locales.
> If I do :
> # date
> I get :
> mar. sept. 28 20:29:47 CEST 2010

I'm not sure where is the standard, I don't use French but I have used
Spanish and the abbreviations are 3 letters and no dot, for month and day.

Fail2ban has some harcoded French month names, using unicode, in the
code you see things like 'TABLE["Feb"] = [u"Fév"]' which I think stands
for Février, September doesn't have an entry since, using 3 letters, its
the same.  Additional to that, it does locale conversion, from any
configured locally to C which is English using ASCII, perhaps this part
is failing, if you have the correct locale it should have worked (but
syslog being in English does point that the locale is not French, but
English, or C, or none).

> Is there some docs on how fail2ban manage locales and why it seems to
> recognize only english format ?

Not that I know of, but I haven't looked for it.
-- 
René Berber