Merge pull request #620 from kwirk/xarf-tweaks

BF: Fix misplaced ";", and duplicate {ip,}matches

config/action.d/xarf-login-attack.conf

@@ -43,13 +43,12 @@ actionban = oifs=${IFS}; IFS=.;SEP_IP=( <ip> ); set -- ${SEP_IP} ;ADDRESSES=$(di
             FROM=<sender>
             SERVICE=<service>
             FAILURES=<failures>
-            MATCHES='<matches>'
             REPORTID=<time>@`uname -n`
             TLP=<tlp>
             PORT=<port>
             DATE=`LC_TIME=C date -u --date=@<time> +"%%a, %%d %%h %%Y %%T +0000"`
             if [ ! -z "$ADDRESSES" ]; then
-                (printf -- %%b "<header>\n<message>\n<report>\n${MATCHES}\n";
+                (printf -- %%b "<header>\n<message>\n<report>\n";
                  date '+Note: Local timezone is %%z (%%Z)';
                  printf -- %%b "<ipmatches>\n\n<footer>") | <mailcmd> <mailargs> ${ADDRESSES//,/\" \"}
             fi