René Berber wrote: [snip] > SSHD_FORMAT_REGEX=.* (sshd.*:|\[sshd\]|proftpd.*:) (?P<message>.*) > USERDEF_FAILED_ENTRY_REGEX=USER (?P<user>.*).* from > \[(::ffff:)?(?P<host>\S+)\] > USERDEF_FAILED_ENTRY_REGEX=Invalid user (?P<user>.*).*from > (::ffff:)?(?P<host>\S+) [snip]
The second looks wrong, change it to the following or just put a colon after user match: USERDEF_FAILED_ENTRY_REGEX=USER (?P<user>\S+):.* from .*\[(::ffff:)?(?P<host>\S+)\] -- René Berber ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ Denyhosts-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/denyhosts-user
