Re: [Fail2ban-users] help with syntax please

[Yaroslav H. <li...@on...>]

See

http://www.fail2ban.org/wiki/index.php/HOWTO_Seek_Help

item 3.5 in particular

ideally prep a preliminary filter file so we could just tune it up

On Fri, 26 Oct 2012, Steve Rolfe wrote:

>    Hi All,
>    new to fail2ban - all working perfectly with ONE exception� I have
>    multiple entries in my /var/log/secure:

>    error retrieving information about user

>    I have created a new filter and put:�

>    [Definition]
>    failregex = (?i):dovecot-auth: pam_succeed_if(dovecot:auth): error
>    retrieving information about user ([A-Za-z0-9-]+).*rip=(?P<host>\S*),.*
>    ignoreregex =

>    but it does not work - can someone please help me with what it should say
>    please?

>    regards
>    steve
-- 
Yaroslav O. Halchenko
Postdoctoral Fellow,   Department of Psychological and Brain Sciences
Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755
Phone: +1 (603) 646-9834                       Fax: +1 (603) 646-1419
WWW:   http://www.linkedin.com/in/yarik