My regex fu seems to have departed me. :( Someone's trying my POP3 port which
gets rejected with:
Mar 31 13:07:01 opal auth: pam_unix(pop3:auth): authentication failure;
logname= uid=0 euid=0 tty=dovecot ruser=abcd1234 rhost=223.4.209.151
Based on rules I coded years ago I tried:
USERDEF_FAILED_ENTRY_REGEX=.* ruser\=(?P<user>.*) rhost\=(::ffff:)?
(?P<host>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
but it doesn't work. I am not sure about the (::ffff:) but the other rules
have it. There used to be a handy utility (kodos?) for debugging this stuff
but it needs Qt3 and doesn't work any more.
What stupid mistake have I made?
Cheers
-Robin
--
----------------------------------------------------------------------
Robin Atwood.
"Ship me somewheres east of Suez, where the best is like the worst,
Where there ain't no Ten Commandments an' a man can raise a thirst"
from "Mandalay" by Rudyard Kipling
----------------------------------------------------------------------
------------------------------------------------------------------------------
Own the Future-Intel® Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
_______________________________________________
Denyhosts-user mailing list
Denyhosts-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/denyhosts-user
