F8 fail2ban regex? Need help

Frank Murphy frankly3d at gmail.com
Mon Oct 27 17:00:14 UTC 2008


How do I create regex for fail2ban.
Nothing goes to jail

Had a google and a look at:
http://linux.die.net/man/1/fail2ban-regex
http://www.fail2ban.org/wiki/index.php/Talk:MANUAL_0_8

but can't figure it out.

Here's wht I have in jail.conf

[ssh-iptables]

<snip>
timeregex = S{3}s{1,2}d{1,2} d{2}:d{2}:d{2}
timepattern = %%b %%d %%H:%%M:%%S
failregex = pam_unix(sshd:auth): authentication failure

</snip>








More information about the fedora-list mailing list