On 8/18/20 12:32 PM, Steve Charmer wrote: > 2020-08-18 12:02:48 [13110] 1k844V-0003PS-LP H=(mail-pg1-f181.google.com > <http://mail-pg1-f181.google.com>) [209.85.215.181]:38343 > I=[10.0.0.0]:25 Warning: EXIM-SPAMMASSASSIN-EXCESSIVE-FAIL2BAN > > my attempt at regex > > failregex = ^%(pid)s \S+ %(host_info)sWarning: > EXIM-SPAMMASSASSIN-EXCESSIVE-FAIL2BAN$ > > It doesn't match :( > failregex = ^.* \[.*\] .* \[<HOST>\]\:.* Warning: EXIM-SPAMMASSASSIN-EXCESSIVE-FAIL2BAN?.
I do not know what command to use to get the PID. "%(pid)s" crashed fail2ban. "<PID>" was ignored. -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
