From: Nick H. <ni...@ho...> - 2024-05-20 12:10:11
|
Surely you need a <HOST> variable in that for f2b to work. Something like: NON-SMTP COMMAND from.\[<HOST>\]:\d+ after CONNECT:.GET./.HTTP/1.1 Normally you'd also expect some sort of timestamp in the logs. On 20/05/2024 12:37, Maurizio Caloro via Fail2ban-users wrote: > > Thanks for your answer > > Please, after generate this syntax, no chance to include this to Fail2ban. > > From 4389 found 0 hits > > [Appl PyRex] > > NON-SMTP COMMAND from.\[+.............\]:......after > CONNECT:.GET./.HTTP/1.1 > > NON-SMTP COMMAND from [64.62.197.214]:13465 after CONNECT: GET / HTTP/1.1 > > But what are wrong here? > > thanks > > *Von:*Arturo 'Buanzo' Busleiman <bu...@bu...> > *Gesendet:* Montag, 20. Mai 2024 12:47 > *An:* mau...@ca... > *Cc:* Fail 2 Ban <Fai...@li...> > *Betreff:* Re: [Fail2ban-users] Fail2ban V1.1.0 from Github - question > Regex > > Use pyrex or any python compatible one. Also be mindful of > interpreting the filter definitions in filter.d and using > fail2ban-regex as testing ground. > > On Mon, May 20, 2024, 07:21 Maurizio Caloro via Fail2ban-users > <fai...@li...> wrote: > > Hello > > Please i think the Version 1.1.0 are the newest Version from Fail2ban? > > Support this now full regex?, i see meny time, that i puzzle on > regex101 me syntax and after implement > > This to live system, this will be always chane. > > So this question, about Regex compatilities ? > > Thanks > > _______________________________________________ > Fail2ban-users mailing list > Fai...@li... > https://lists.sourceforge.net/lists/listinfo/fail2ban-users > > > > _______________________________________________ > Fail2ban-users mailing list > Fai...@li... > https://lists.sourceforge.net/lists/listinfo/fail2ban-users |