diff --git a/man/jail.conf.5 b/man/jail.conf.5 index 14dc5663..466172f5 100644 --- a/man/jail.conf.5 +++ b/man/jail.conf.5 @@ -135,8 +135,9 @@ There are two filter definitions used in the [Definition] section: .TP \fBfailregex\fR -is the regex (\fBreg\fRular \fBex\fRpression) that will match failed attempts. The tag is used as part of the regex and is itself a regex +is the regex (\fBreg\fRular \fBex\fRpression) that will match failed attempts. The tag \fI\fR is used as part of the regex and is itself a regex for IPv4 addresses and hostnames. fail2ban will work out which one of these it actually is. +For multiline regexs the tag \fI\fR should be used to separate lines. This allows lines between the matched lines to continue to be searched for other failures. The tag can be used multiple times. .TP \fBignoreregex\fR