On 6/19/2018 11:42 AM, daniel_1983--- via Fail2ban-users wrote: [snip] > It seems like the (?i) is a kind of ignore case flag used for the whole > regex. Wouldn't that slow down things ? I prefer your version which targets > the only other possible spelling.
Actually with the version of fail2ban I have the ignore case is already
there, slightly different (only affects the interesting part):
failregex = ^%(__prefix_line)swarning: [-._\w]+\[<HOST>\]: SASL
((?i)LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(:[
A-Za-z0-9+/:]*={0,2})?\s*$
Maybe its best if you just upgrade to a recent version.
--
René Berber
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
