How about this:
<HOST>\:\d{2,5}
Denis
> On 1 Aug 2019, at 07:18, Mick Burns <[email protected]> wrote:
>
> Hi James,
>
> The source port number is dynamic so I need to catch it in a capture
> group in order to pass both the source host and source port to the
> action.
> What you gave here only works if the source port is known and is also static.
>
> Thanks
>
>
> On Wed, Jul 31, 2019 at 2:51 PM James Moe via Fail2ban-users
> <[email protected]> wrote:
>>
>> On 29/07/2019 5.30 PM, Bill Shirley wrote:
>>
>>> Indeed, not only I need to ban on the source IP, but also on the source
>>> port.
>>> My log files entries exposes this in a pretty standard form : src_ip:port
>>>
>>> Is this feasible at all with f2b ?
>>>
>> ...<HOST>\:port_number...
>>
>> --
>> James Moe
>> moe dot james at sohnen-moe dot com
>> 520.743.3936
>> Think.
>>
>>
>> _______________________________________________
>> Fail2ban-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/fail2ban-users
>
>
> _______________________________________________
> Fail2ban-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/fail2ban-users
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
