apparently yoh managed to find yet another format of time reporting,
which is not supported by fail2ban ;)
and I don't think that we have already a filter for that failure -- do
you have a custom filter or I am just wrong?
Where do you get those lines from? ~/.vnc/*.log ? or /var/log/Xorg.0.log
(where I think those would be prefixed with (II) )?
On Sun, 19 Jul 2009, Luca wrote:
> Package: fail2ban
> Version: 0.8.3-6
> Severity: normal
> Found a match for '19/07/09 20:38:10 rfbVncAuthProcessResponse:
> authentication failed from *ip*
> ' but no valid date/time found for '19/07/09 20:38:10
> rfbVncAuthProcessResponse: authentication failed from *ip*
--
.-.
=------------------------------ /v\ ----------------------------=
Keep in touch // \\ (yoh@|www.)onerussian.com
Yaroslav Halchenko /( )\ ICQ#: 60653192
Linux User ^^-^^ [175555]
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]