github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

BF: In 0.9 recidive bans come from fail2ban.server.actions 

Also changed journalmatch to limit to WARNING priority to avoid the
recidive + DEBUG combo issue
pull/491/head
Steven Hiscocks 2013-12-13 21:55:43 +00:00
parent bff170ec43
commit 2c3dbc8046
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
config/filter.d/recidive.conf
View File

@ -21,16 +21,16 @@ before = common.conf
[Definition] [Definition]
_daemon = fail2ban\.actions _daemon = fail2ban\.server\.actions
# The name of the jail that this filter is used for. In jail.conf, name the # The name of the jail that this filter is used for. In jail.conf, name the
# jail using this filter 'recidive', or change this line! # jail using this filter 'recidive', or change this line!
_jailname = recidive _jailname = recidive
failregex = ^(%(__prefix_line)s|,\d{3} fail2ban.actions:\s+)WARNING\s+\[(?!%(_jailname)s\])(?:.*)\]\s+Ban\s+<HOST>\s*$ failregex = ^(%(__prefix_line)s|,\d{3} %(_daemon)s:\s+)WARNING\s+\[(?!%(_jailname)s\])(?:.*)\]\s+Ban\s+<HOST>\s*$
[Init] [Init]
journalmatch = _SYSTEMD_UNIT=fail2ban.service journalmatch = _SYSTEMD_UNIT=fail2ban.service PRIORITY=4
# Author: Tom Hendrikx, modifications by Amir Caspi # Author: Tom Hendrikx, modifications by Amir Caspi