On 5/14/2020 11:55 AM, James Moe via Fail2ban-users wrote:
On 2020-05-13 4:44 PM, Doug Preston via Fail2ban-users wrote:
I don't get any hits even though there were 163 lines with this in it.
Provide samples of the lines that are not matching.
And your postfix.conf filter.
postfix.conf
Using the info you provided, the result is below. Attached is the modified
conf file that succeeded.
The "prefregex" line failed always.
Running tests
=============
Use failregex file : /t/tmp3/f2b-test.conf
Use log file : /t/tmp3/f2b-test.log
Use encoding : UTF-8
Results
=======
Failregex: 5 total
|- #) [# of hits] regular expression
| 1) [5] ^.*mail postfix/smtpd.* lost connection after EHLO from
unknown\[<HOST>\].*
`-
Ignoreregex: 0 total
Date template hits:
|- [# of hits] date format
| [5] {^LN-BEG}(?:DAY )?MON Day %k:Minute:Second(?:\.Microseconds)?(?: ExYear)?
`-
Lines: 5 lines, 0 ignored, 5 matched, 0 missed
[processed in 0.01 sec]
What version of fail2ban are you running? What OS, I am running Centos 7
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
