On 3/6/22 09:35, James Moe via Fail2ban-users wrote:
Thanks a million James, that works! I am not sure I grok why (I sorta do halfway) so I will ponder on it. Anywise at least you got me over the hump and kudos for your willingness to tackle my regex expression!On 2022-03-05 11:43, Marc Chamberlin via Fail2ban-users wrote:fail2ban-regex -v -v -l HEAVYDEBUG "2022-03-05 09:30:18,739 ERROR | org.apache.james.protocols.api.handler.CommandHandler | AUTH method LOGIN failed from r...@marcchamberlin.com@87.246.7.246" "^\s*ERROR(\s*\|)?(\s+[\w+\.]+\w+\s+\|)?\s+AUTH method LOGIN failed from.*<ADDR>\s*$"Change the regex to: ^\s*ERROR(\s*\|)?(\s+[\w+\.]+\w+\s+\|)?\s+AUTH method LOGIN failed from.*\@<ADDR>\s*$ Note the addition of "\@".
Marc... -- *"The Truth is out there" - Spooky**_ _ . . . . . . _ _ . _ _ _ _ . . . . _ . . . . _ _ . _ _ _ . . . . _ _ . _ . . _ . _ _ _ _ . _ . _ . _ . _ . *
Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before!(/This email is digitally signed and the electronic signature is attached. If you know how, you can use my public key to prove this email indeed came from me and has not been modified in transit. My public key, which can be used for sending encrypted email to me also, can be found at - https://keys.openpgp.org/search?q=m...@marcchamberlin.com or just ask me for it and I will send it to you as an attachment. If you don't understand all this geek speak, no worries, just ignore this explanation and ignore the signature key attached to this email (it will look like gibberish if you open it) and/or ask me to explain it further if you like./)
OpenPGP_0xD23D75B63BF0E8B7.asc
Description: OpenPGP public key
OpenPGP_signature
Description: OpenPGP digital signature
_______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
