On 2022-03-05 11:43, Marc Chamberlin via Fail2ban-users wrote: > fail2ban-regex -v -v -l HEAVYDEBUG "2022-03-05 09:30:18,739 ERROR | > org.apache.james.protocols.api.handler.CommandHandler | AUTH method > LOGIN failed from r...@marcchamberlin.com@87.246.7.246" > "^\s*ERROR(\s*\|)?(\s+[\w+\.]+\w+\s+\|)?\s+AUTH method LOGIN failed > from.*<ADDR>\s*$" > Change the regex to: ^\s*ERROR(\s*\|)?(\s+[\w+\.]+\w+\s+\|)?\s+AUTH method LOGIN failed from.*\@<ADDR>\s*$
Note the addition of "\@". -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
