2017-08-08 10:59:45 +00:00
|
|
|
.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.47.4.
|
2018-01-18 15:45:22 +00:00
|
|
|
.TH FAIL2BAN-REGEX "1" "January 2018" "fail2ban-regex 0.11.0.dev1" "User Commands"
|
2006-10-01 21:20:42 +00:00
|
|
|
.SH NAME
|
|
|
|
fail2ban-regex \- test Fail2ban "failregex" option
|
|
|
|
.SH SYNOPSIS
|
|
|
|
.B fail2ban-regex
|
2016-09-08 16:29:45 +00:00
|
|
|
[\fI\,OPTIONS\/\fR] \fI\,<LOG> <REGEX> \/\fR[\fI\,IGNOREREGEX\/\fR]
|
2006-10-01 21:20:42 +00:00
|
|
|
.SH DESCRIPTION
|
2013-10-30 14:00:38 +00:00
|
|
|
Fail2Ban reads log file that contains password failure report
|
2006-10-01 21:20:42 +00:00
|
|
|
and bans the corresponding IP addresses using firewall rules.
|
|
|
|
.PP
|
2007-01-21 22:21:13 +00:00
|
|
|
This tools can test regular expressions for "fail2ban".
|
2013-10-30 23:27:30 +00:00
|
|
|
.SS "LOG:"
|
|
|
|
.TP
|
|
|
|
string
|
|
|
|
a string representing a log line
|
|
|
|
.TP
|
|
|
|
filename
|
2016-09-08 16:29:45 +00:00
|
|
|
path to a log file (\fI\,/var/log/auth.log\/\fP)
|
2014-03-14 12:02:39 +00:00
|
|
|
.TP
|
|
|
|
"systemd\-journal"
|
|
|
|
search systemd journal (systemd\-python required)
|
2013-10-30 23:27:30 +00:00
|
|
|
.SS "REGEX:"
|
|
|
|
.TP
|
|
|
|
string
|
|
|
|
a string representing a 'failregex'
|
|
|
|
.TP
|
|
|
|
filename
|
|
|
|
path to a filter file (filter.d/sshd.conf)
|
|
|
|
.SS "IGNOREREGEX:"
|
|
|
|
.TP
|
|
|
|
string
|
|
|
|
a string representing an 'ignoreregex'
|
|
|
|
.TP
|
|
|
|
filename
|
|
|
|
path to a filter file (filter.d/sshd.conf)
|
2007-01-21 22:21:13 +00:00
|
|
|
.SH OPTIONS
|
|
|
|
.TP
|
2013-10-30 14:00:38 +00:00
|
|
|
\fB\-\-version\fR
|
|
|
|
show program's version number and exit
|
|
|
|
.TP
|
2007-01-21 22:21:13 +00:00
|
|
|
\fB\-h\fR, \fB\-\-help\fR
|
2013-10-30 14:00:38 +00:00
|
|
|
show this help message and exit
|
2007-01-21 22:21:13 +00:00
|
|
|
.TP
|
2017-08-08 10:59:45 +00:00
|
|
|
\fB\-c\fR CONFIG, \fB\-\-config\fR=\fI\,CONFIG\/\fR
|
|
|
|
set alternate config directory
|
2017-03-13 01:07:14 +00:00
|
|
|
.TP
|
2016-09-08 16:29:45 +00:00
|
|
|
\fB\-d\fR DATEPATTERN, \fB\-\-datepattern\fR=\fI\,DATEPATTERN\/\fR
|
2014-03-14 12:02:39 +00:00
|
|
|
set custom pattern used to match date/times
|
|
|
|
.TP
|
2017-08-08 10:59:45 +00:00
|
|
|
\fB\-\-timezone\fR=\fI\,TIMEZONE\/\fR, \fB\-\-TZ\fR=\fI\,TIMEZONE\/\fR
|
|
|
|
set time\-zone used by convert time format
|
|
|
|
.TP
|
2016-09-08 16:29:45 +00:00
|
|
|
\fB\-e\fR ENCODING, \fB\-\-encoding\fR=\fI\,ENCODING\/\fR
|
2014-03-14 12:02:39 +00:00
|
|
|
File encoding. Default: system locale
|
|
|
|
.TP
|
2016-07-14 10:19:46 +00:00
|
|
|
\fB\-r\fR, \fB\-\-raw\fR
|
|
|
|
Raw hosts, don't resolve dns
|
|
|
|
.TP
|
2016-09-22 18:16:28 +00:00
|
|
|
\fB\-\-usedns\fR=\fI\,USEDNS\/\fR
|
|
|
|
DNS specified replacement of tags <HOST> in regexp
|
|
|
|
('yes' \- matches all form of hosts, 'no' \- IP
|
|
|
|
addresses only)
|
|
|
|
.TP
|
2016-09-08 16:29:45 +00:00
|
|
|
\fB\-L\fR MAXLINES, \fB\-\-maxlines\fR=\fI\,MAXLINES\/\fR
|
2017-08-08 10:59:45 +00:00
|
|
|
maxlines for multi\-line regex.
|
2014-03-14 12:02:39 +00:00
|
|
|
.TP
|
2016-09-08 16:29:45 +00:00
|
|
|
\fB\-m\fR JOURNALMATCH, \fB\-\-journalmatch\fR=\fI\,JOURNALMATCH\/\fR
|
2014-03-14 12:02:39 +00:00
|
|
|
journalctl style matches overriding filter file.
|
|
|
|
"systemd\-journal" only
|
|
|
|
.TP
|
2016-09-08 16:29:45 +00:00
|
|
|
\fB\-l\fR LOG_LEVEL, \fB\-\-log\-level\fR=\fI\,LOG_LEVEL\/\fR
|
2013-10-30 14:00:38 +00:00
|
|
|
Log level for the Fail2Ban logger to use
|
2013-03-07 18:03:49 +00:00
|
|
|
.TP
|
|
|
|
\fB\-v\fR, \fB\-\-verbose\fR
|
2017-08-08 10:59:45 +00:00
|
|
|
Increase verbosity
|
|
|
|
.TP
|
|
|
|
\fB\-\-verbosity\fR=\fI\,VERBOSE\/\fR
|
|
|
|
Set numerical level of verbosity (0..4)
|
|
|
|
.TP
|
|
|
|
\fB\-\-verbose\-date\fR, \fB\-\-VD\fR
|
|
|
|
Verbose date patterns/regex in output
|
2013-10-30 14:00:38 +00:00
|
|
|
.TP
|
|
|
|
\fB\-D\fR, \fB\-\-debuggex\fR
|
|
|
|
Produce debuggex.com urls for debugging there
|
|
|
|
.TP
|
2014-03-14 12:02:39 +00:00
|
|
|
\fB\-\-print\-no\-missed\fR
|
|
|
|
Do not print any missed lines
|
|
|
|
.TP
|
|
|
|
\fB\-\-print\-no\-ignored\fR
|
|
|
|
Do not print any ignored lines
|
|
|
|
.TP
|
2014-10-28 01:47:48 +00:00
|
|
|
\fB\-\-print\-all\-matched\fR
|
|
|
|
Print all matched lines
|
|
|
|
.TP
|
2013-10-30 14:00:38 +00:00
|
|
|
\fB\-\-print\-all\-missed\fR
|
2014-03-14 12:02:39 +00:00
|
|
|
Print all missed lines, no matter how many
|
2013-10-30 14:00:38 +00:00
|
|
|
.TP
|
|
|
|
\fB\-\-print\-all\-ignored\fR
|
2014-03-14 12:02:39 +00:00
|
|
|
Print all ignored lines, no matter how many
|
2013-10-30 14:00:38 +00:00
|
|
|
.TP
|
|
|
|
\fB\-t\fR, \fB\-\-log\-traceback\fR
|
|
|
|
Enrich log\-messages with compressed tracebacks
|
2007-01-21 22:21:13 +00:00
|
|
|
.TP
|
2013-10-30 14:00:38 +00:00
|
|
|
\fB\-\-full\-traceback\fR
|
|
|
|
Either to make the tracebacks full, not compressed (as
|
|
|
|
by default)
|
2013-10-30 23:27:30 +00:00
|
|
|
.SH AUTHOR
|
|
|
|
Written by Cyril Jaquier <cyril.jaquier@fail2ban.org>.
|
|
|
|
Many contributions by Yaroslav O. Halchenko and Steven Hiscocks.
|
2013-10-30 14:00:38 +00:00
|
|
|
.SH "REPORTING BUGS"
|
|
|
|
Report bugs to https://github.com/fail2ban/fail2ban/issues
|
2013-10-30 23:27:30 +00:00
|
|
|
.SH COPYRIGHT
|
|
|
|
Copyright \(co 2004\-2008 Cyril Jaquier, 2008\- Fail2Ban Contributors
|
|
|
|
.br
|
|
|
|
Copyright of modifications held by their respective authors.
|
|
|
|
Licensed under the GNU General Public License v2 (GPL).
|
2006-10-01 21:20:42 +00:00
|
|
|
.SH "SEE ALSO"
|
|
|
|
.br
|
|
|
|
fail2ban-client(1)
|
|
|
|
fail2ban-server(1)
|