Hi James, The source port number is dynamic so I need to catch it in a capture group in order to pass both the source host and source port to the action. What you gave here only works if the source port is known and is also static.
Thanks On Wed, Jul 31, 2019 at 2:51 PM James Moe via Fail2ban-users <[email protected]> wrote: > > On 29/07/2019 5.30 PM, Bill Shirley wrote: > > > Indeed, not only I need to ban on the source IP, but also on the source > > port. > > My log files entries exposes this in a pretty standard form : src_ip:port > > > > Is this feasible at all with f2b ? > > > ...<HOST>\:port_number... > > -- > James Moe > moe dot james at sohnen-moe dot com > 520.743.3936 > Think. > > > _______________________________________________ > Fail2ban-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/fail2ban-users _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
