From 8faf84b7f7540830d40b3c643c8123a9234342a5 Mon Sep 17 00:00:00 2001 From: Daniel Black Date: Thu, 13 Jun 2013 08:34:10 +1000 Subject: [PATCH] BF: authentication errors end in 01-09 but the beginning part indicates the service as per https://github.com/fail2ban/fail2ban/issues/246#issuecomment-19327955 thanks to ykimon --- config/filter.d/3proxy.conf | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/config/filter.d/3proxy.conf b/config/filter.d/3proxy.conf index 09855d75..c341cf80 100644 --- a/config/filter.d/3proxy.conf +++ b/config/filter.d/3proxy.conf @@ -8,10 +8,11 @@ [Definition] # Option: failregex -# Notes.: http://www.3proxy.ru/howtoe.asp#ERRORS that 1-9 are all authentication problems (%E field) +# Notes.: http://www.3proxy.ru/howtoe.asp#ERRORS indicates that 01-09 are +# all authentication problems (%E field) # Log format is: "L%d-%m-%Y %H:%M:%S %z %N.%p %E %U %C:%c %R:%r %O %I %h %T" # Values: TEXT # -failregex = ^\s[+-][0-9]{4} \S+ 0000[1-9] \S+ :[0-9]+ [0-9.]+:[0-9]+ [0-9]+ .*$ +failregex = ^\s[+-]\d{4} \S+ \d{3}0[1-9] \S+ :\d+ [0-9.]+:\d+ \d+ ignoreregex =