Hi Tom, On Friday 05 June 2015 01:07 PM, Tom Hendrikx wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > This works for me with the supplied example: > > failregex = ^ sogod \[\d+\]: SOGoRootPage Login from '<HOST>' for user > '.*' might not have worked - password policy: -?\d+ grace: -?\d+ > expire: -?\d+ bound: -?\d+$ > > If you also need a variant without the password policy note appended, > add a second failregex in stead of improving (i.e. complicating) the > first one. > > @yves: the anchoring at start and finish is done in f2b to circumvent > DOS attacks (see list archives for details) but when you change it > into ^.* .... .*$, the protection doesn't work anymore. Technically > f2b doesn't care if you anchor or not. > > Tom > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2 > > iQIcBAEBCAAGBQJVcVHGAAoJEJPfMZ19VO/1ZZsP/08HuWb5Lea9m9n9K/1KnXn2 > kR5nLTDhFwfe1nokdAnvbZFsTwRCxU6xomwY7CzwsimFejDWLEBDAEOpdjHQ9Fe8 > xufJBL/sjUqZaCwlhQ+7CguGC0DLKhDPkzHUvt1+pMLOXPm1RPuAKtplYKL2bEN9 > 81EHO1vpfPW/b86+IoXVva0zcTVEutWUfLcu5HYjgixPSERShOAm4HwCo9vGB+eb > UvKUqSU0QPvvLM5YpnOKJrd6HVqIX+/kj/yU91QU4gyc48CuwN+oJXQxFMkEgjIr > rZQUgkAFO0FNKJxG9xDL2Y2NgPJymHWuZAEp6AHmPKVB4U7ar8f1g4Mg3FWkmyCH > cAQRaEQQF0CNL5E8ZMqwPRCCa1AgponJWFhbXaL6n664uIBLqOgFaHFW6upZ4XIC > vpQ5iA0peyjh5z0lmxEddQNZXyN5cAM/3jRpWNB6DkWCSGBIhyq+n6smSgdHiQd3 > A0g372fTjjl/xdHgAPTz5zTdve+06/7KHA3nyP8gtPR/xSYOcvH1jcrGCSxW9fNG > Y/h6R7+qb4nK+nkypcHTva//Z7VkWlVKp9SjnDmq8ASs9W7ubw3QJCaw5pjbVJwE > JYLgwJDvJHxP0CwJ7ZaqsACoOVRDpP+eSTvwcTL0namqASSzDPVkVNNsMTGP8ePM > crkyryKjlWimsafhL/Uy > =kLrT > -----END PGP SIGNATURE----- > > ------------------------------------------------------------------------------ > _______________________________________________ > Fail2ban-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/fail2ban-users I am afraid, may be I am doing something wrong. This is also not working. I am not sure why.
I installed fail2ban using yum, copied the jail.conf to jail.local and then enable the sogo-auth option. I thought this should work straight forward. I tried different formats of regex but no one are working as expected. Can any one help me with this? Thanks, Kamaldeep Singh ------------------------------------------------------------------------------ _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
