diff --git a/Developing-Regex-in-Fail2ban.md b/Developing-Regex-in-Fail2ban.md index f054c41..e860c18 100644 --- a/Developing-Regex-in-Fail2ban.md +++ b/Developing-Regex-in-Fail2ban.md @@ -109,13 +109,13 @@ failregex = query.+ ``` Notice that there is no '`$`' to catch end-of-line match condition? We’ll do those '`$`' lastly because we’re trying to just match … ANYTHING! -Re-run fail2ban-regex with -l HEAVYDEBUG and notice the '`T: Matched FailRegex part`': +Re-run fail2ban-regex with '`-l HEAVYDEBUG`' and notice the '`T: Matched FailRegex part`': ```console T: Matched FailRegex('query.+(?:(?:::f{4,6}:)?(?P(?:\\d{1,3}\\.){3}\\d{1,3})|\\[?(?P(?:[0-9a-fA-F]{1,4}::?|::){1,7}(?:[0-9a-fA-F]{1,4}|(?<=:):))\\]?|(?P[\\w\\-.^_]*\\w))') ``` Now I am matching SOMETHING! -Notice the convoluted patterns after '`query.+?`' These long patterns represent '``' part. We can safely ignore that for now. +Notice the convoluted patterns after '`query.+`'? These long patterns represent '``' part. We can safely ignore that for now. Most importantly, I am MATCHING something that starts with '`^query`'! Yippee!