Re: [Fail2ban-users] Unrecognized date format

[Alex <mys...@gm...>]

Hi,

>> My filter is very simple:
>>
>> failregex = [MASS_MAILING.* from : Total
>
> I would have suggested something like this:
>
> failregex = \[MASS_MAILING\] .* from <HOST>: Total .* recipients$

I tried to make it as broad as possible to make sure my filter wasn't
the cause of the failure to match.

It turns out I was able to reformat the way squirrelmail prints its
date, so was able to then match it properly with fail2ban.

I also got squirrelmail to log to syslog, which uses the well-known
date format, so have that option too.

Thanks again,
Alex