github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

BF: authentication errors end in 01-09 but the beginning part indicates the service as per https://github.com/fail2ban/fail2ban/issues/246#issuecomment-19327955 thanks to ykimon

pull/247/head
Daniel Black 2013-06-13 08:34:10 +10:00
parent fd9f9f16e0
commit 8faf84b7f7
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
config/filter.d/3proxy.conf
View File

@ -8,10 +8,11 @@
[Definition]
# Option: failregex
# Notes.: http://www.3proxy.ru/howtoe.asp#ERRORS that 1-9 are all authentication problems (%E field)
# Notes.: http://www.3proxy.ru/howtoe.asp#ERRORS indicates that 01-09 are
# all authentication problems (%E field)
# Log format is: "L%d-%m-%Y %H:%M:%S %z %N.%p %E %U %C:%c %R:%r %O %I %h %T"
# Values: TEXT
#
failregex = ^\s[+-][0-9]{4} \S+ 0000[1-9] \S+ <HOST>:[0-9]+ [0-9.]+:[0-9]+ [0-9]+ .*$
failregex = ^\s[+-]\d{4} \S+ \d{3}0[1-9] \S+ <HOST>:\d+ [0-9.]+:\d+ \d+
ignoreregex =