Fail2ban python regex issue

RW rwmaillists at googlemail.com
Sun Jul 24 15:55:55 UTC 2016


On Sat, 23 Jul 2016 17:06:53 -0400
pathiaki2 via freebsd-questions wrote:

> Hi,
> 
> I'm extending fail2ban to catch things on FreeBSD.
> ...
> Jul 23 00:02:48 <machine FQDN> dovecot: auth: 
> ldap(valeria,91.200.12.148): unknown user (SHA1 of given password: 
> e557ee1b78fd6978af5ea1f614597f79dc13c40e)
> 
> I'm trying this:
> 
> ^%(__prefix_line)s(: auth: ldap\(\S+,<HOST>\):) unknown user\s*$
> 
> What am I missing?  There's no error with the interpreter, it's just
> not matching the line.

I don't use fail2ban, so I may have misunderstood something, but the
obvious answer is that the "\s*$" on the end of the regex shouldn't be
there.


More information about the freebsd-questions mailing list