mirror of https://github.com/fail2ban/fail2ban
small tweaks (both 2nd time and facility are optional, avoid catch-all, etc)
parent
ec873e2dc3
commit
010e76406f
|
@ -6,4 +6,4 @@
|
|||
before = common.conf
|
||||
|
||||
[Definition]
|
||||
failregex = ^%(__prefix_line)s(?:\([0-9 :.-]{23}\) <SECURITY_LOG>:)? Connection ".+": User authentication failed. The user name that has been provided was "<F-USER>.+</F-USER>", from <HOST>.$
|
||||
failregex = ^%(__prefix_line)s(?:(?:\([\d\-]+ [\d:.]+\) )?<SECURITY_LOG>: )?Connection "[^"]+": User authentication failed. The user name that has been provided was "<F-USER>(?:[^"]+|.+)</F-USER>", from <ADDR>\.$
|
||||
|
|
Loading…
Reference in New Issue