Re: [Fail2ban-users] Troubles setting up regex filter SOLVED!

2022-03-06 Thread Marc Chamberlin via Fail2ban-users
On 3/6/22 09:35, James Moe via Fail2ban-users wrote: On 2022-03-05 11:43, Marc Chamberlin via Fail2ban-users wrote: fail2ban-regex -v -v -l HEAVYDEBUG "2022-03-05 09:30:18,739 ERROR | org.apache.james.protocols.api.handler.CommandHandler | AUTH method LOGIN failed from r...@marcchamberlin.com@8

Re: [Fail2ban-users] Troubles setting up regex filter

2022-03-06 Thread James Moe via Fail2ban-users
On 2022-03-05 11:43, Marc Chamberlin via Fail2ban-users wrote: > fail2ban-regex -v -v -l HEAVYDEBUG "2022-03-05 09:30:18,739 ERROR | > org.apache.james.protocols.api.handler.CommandHandler | AUTH method > LOGIN failed from r...@marcchamberlin.com@87.246.7.246" > "^\s*ERROR(\s*\|)?(\s+[\w+\.]+\w

Re: [Fail2ban-users] multiline match?

2022-03-06 Thread Dominic Raferd
On 06/03/2022 04:35, Richard Hector wrote: I have lines like these in my logs (reported by logcheck, in this case): Mar  6 16:17:38 akl-host6 sshd[33035]: error: kex_exchange_identification: Connection closed by remote host Mar  6 16:17:38 akl-host6 sshd[33035]: Connection closed by 46.19.139.1