From 10cc7e6e599e588cbd0d4538a21dec342b02763e Mon Sep 17 00:00:00 2001 From: benrubson Date: Fri, 17 Feb 2017 08:42:40 +0100 Subject: [PATCH] Apache, detect syslog prefix, add test --- fail2ban/tests/files/logs/apache-auth | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/fail2ban/tests/files/logs/apache-auth b/fail2ban/tests/files/logs/apache-auth index 29de57eb..6e41bab4 100644 --- a/fail2ban/tests/files/logs/apache-auth +++ b/fail2ban/tests/files/logs/apache-auth @@ -11,6 +11,10 @@ # failJSON: { "time": "2013-07-11T01:21:44", "match": true , "host": "2606:2800:220:1:248:1893:25c8:1946" } [Thu Jul 11 01:21:44 2013] [error] [client 2606:2800:220:1:248:1893:25c8:1946] user test-ipv6 not found: / +# Must mach syslog prefix +# failJSON: { "time": "2005-02-16T22:32:48", "match": true , "host": "127.0.0.1" } +Feb 16 22:32:48 srv httpd[22034]: [error] [client 127.0.0.1] user wrongusername not found: /basic/file + # The failures below use the configuration described in fail2ban/tests/files/config/apache-auth #