mirror of https://github.com/fail2ban/fail2ban
review, simplify regex and capture user name
parent
df91b047d2
commit
996553f330
|
@ -9,7 +9,7 @@ before = common.conf
|
||||||
[Definition]
|
[Definition]
|
||||||
_daemon = danted
|
_daemon = danted
|
||||||
|
|
||||||
failregex = ^%(__prefix_line)sinfo: block\(1\): tcp/accept \]: <HOST>\.\d+ [\d.]+: error after reading \d+ bytes? in \d+ seconds?: (could not access user "\w+"'s records in the system password file: no system error|system password authentication failed for user "\w+")$
|
failregex = ^%(__prefix_line)sinfo: block\(1\): tcp/accept \]: <HOST>\.\d+ [\d.]+: error after reading \d+ bytes? in \d+ seconds?: (could not access |system password authentication failed for )user "<F-USER>[^"]+</F-USER>"
|
||||||
|
|
||||||
[Init]
|
[Init]
|
||||||
journalmatch = _SYSTEMD_UNIT=danted.service
|
journalmatch = _SYSTEMD_UNIT=danted.service
|
||||||
|
|
Loading…
Reference in New Issue