Re: [Fail2ban-users] multiline match?

2022-03-07 Thread James Moe via Fail2ban-users
On 2022-03-07 11:45, James Moe via Fail2ban-users wrote: > The vertical bar allows multi-line expressions. Below is a sample given the > log entries you provided. > (Sigh.) Do not know what I was thinking. I apologize for the confusing, and wrong, post. -- James Moe moe dot james at

Re: [Fail2ban-users] multiline match?

2022-03-07 Thread James Moe via Fail2ban-users
On 2022-03-07 03:15, Richard Hector wrote: > Mar  6 16:17:38 akl-host6 sshd[33035]: error: > kex_exchange_identification: Connection closed by remote host > Mar  6 16:17:38 akl-host6 sshd[33035]: Connection closed by > 46.19.139.18 port 32834 > (I am a little late to the party.) The

Re: [Fail2ban-users] Troubles setting up regex filter SOLVED!

2022-03-07 Thread James Moe via Fail2ban-users
On 2022-03-06 13:49, Marc Chamberlin via Fail2ban-users wrote: >> Note the addition of "\@". >> > Thanks a million James, that works! I am not sure I grok why (I sorta do > halfway) so I will ponder on it. > I am not clear either. I do know it is a special character in regexes. In PERL it is

Re: [Fail2ban-users] multiline match?

2022-03-07 Thread Richard Hector
On 8/03/22 00:11, Dominic Raferd wrote: On 07/03/2022 10:37, Richard Hector wrote: On 7/03/22 23:15, Richard Hector wrote: On 6/03/22 20:54, Dominic Raferd wrote: On 06/03/2022 04:35, Richard Hector wrote: I have lines like these in my logs (reported by logcheck, in this case): Mar  6

Re: [Fail2ban-users] multiline match?

2022-03-07 Thread Dominic Raferd
On 07/03/2022 10:37, Richard Hector wrote: On 7/03/22 23:15, Richard Hector wrote: On 6/03/22 20:54, Dominic Raferd wrote: On 06/03/2022 04:35, Richard Hector wrote: I have lines like these in my logs (reported by logcheck, in this case): Mar  6 16:17:38 akl-host6 sshd[33035]: error:

Re: [Fail2ban-users] multiline match?

2022-03-07 Thread Richard Hector
On 7/03/22 23:15, Richard Hector wrote: On 6/03/22 20:54, Dominic Raferd wrote: On 06/03/2022 04:35, Richard Hector wrote: I have lines like these in my logs (reported by logcheck, in this case): Mar  6 16:17:38 akl-host6 sshd[33035]: error: kex_exchange_identification: Connection closed by

Re: [Fail2ban-users] multiline match?

2022-03-07 Thread Richard Hector
On 6/03/22 20:54, Dominic Raferd wrote: On 06/03/2022 04:35, Richard Hector wrote: I have lines like these in my logs (reported by logcheck, in this case): Mar  6 16:17:38 akl-host6 sshd[33035]: error: kex_exchange_identification: Connection closed by remote host Mar  6 16:17:38 akl-host6