Good afternoon. I recently upgraded Horde webmail edition to 5.2.22 and the fail2ban regex isn't matching the log line even though I'm testing the regex with debbuex.com and it says it should match. I'm not very knowledgeable in regular expressions and was hoping someone here could lend me a hand.
The regex I came up with is "^ HORDE: \[(horde|imp)\] FAILED LOGIN for
\S+ to (horde|{[^}]+}) \(<HOST>\) (.*)$"
A sample line to match is as follows " HORDE: [horde] FAILED LOGIN for
username to horde (127.0.0.1) [pid 2096 on line 199 of
"/var/www/horde/login.php"]"
I replaced the real IP address with 127.0.0.1 for security purposes but
in the log file I have a real valid IP address.
Thank you very much in advance,
David Wells.
<<attachment: dwells.vcf>>
_______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
