A bit more playing with fail2ban-regex indicates it's not matching the log prefix:
Nov 17 14:59:57 shelob sendmail[23444]: I'm using ^%(__prefix_line) to match that (including the space after the colon). I don't see any way to pass the _daemon variable to fail2ban-regex except as part of a filter .conf file to populate that part of the regex. ------------------------------------------------------------------------------ Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
