diff --git a/config/filter.d/zoneminder.conf b/config/filter.d/zoneminder.conf index aa3b4e6d..cc82755a 100644 --- a/config/filter.d/zoneminder.conf +++ b/config/filter.d/zoneminder.conf @@ -1,5 +1,7 @@ # Fail2Ban filter for Zoneminder login failures -# + +[INCLUDES] +before = apache-common.conf [Definition] @@ -7,13 +9,9 @@ # # # Option: failregex -# Notes.: regex to match the password failure messages in the logfile. The -# host must be matched by a group named "host". The tag "" can -# be used for standard IP/hostname matching and is only an alias for -# (?:::f{4,6}:)?(?P[\w\-.^_]+) +# Notes.: regex to match the password failure messages in the logfile. - -failregex = ^\[\](?: \[:error\])?(?: \[pid \d+\])? \[client :\d+\] WAR \[Login denied for user "[^"]*"\] +failregex = ^%(_apache_error_client)s WAR \[Login denied for user "[^"]*"\] ignoreregex =