mirror of https://github.com/fail2ban/fail2ban
small review, prefix replaced with `%(_apache_error_client)s` from apache-common.conf include
parent
ac95449bbb
commit
4163f32968
|
@ -1,5 +1,7 @@
|
|||
# Fail2Ban filter for Zoneminder login failures
|
||||
#
|
||||
|
||||
[INCLUDES]
|
||||
before = apache-common.conf
|
||||
|
||||
[Definition]
|
||||
|
||||
|
@ -7,13 +9,9 @@
|
|||
#
|
||||
#
|
||||
# Option: failregex
|
||||
# Notes.: regex to match the password failure messages in the logfile. The
|
||||
# host must be matched by a group named "host". The tag "<HOST>" can
|
||||
# be used for standard IP/hostname matching and is only an alias for
|
||||
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
|
||||
# Notes.: regex to match the password failure messages in the logfile.
|
||||
|
||||
|
||||
failregex = ^\[\](?: \[:error\])?(?: \[pid \d+\])? \[client <HOST>:\d+\] WAR \[Login denied for user "[^"]*"\]
|
||||
failregex = ^%(_apache_error_client)s WAR \[Login denied for user "[^"]*"\]
|
||||
|
||||
ignoreregex =
|
||||
|
||||
|
|
Loading…
Reference in New Issue