Thanks for the helpful reply. My multi-line regex is working against my log file test sample now. fail2ban-regex -v shows the correct values for IP addresses to block.
This discussion at Stack Overflow was helpful to me; YMMV of course. https://stackoverflow.com/questions/14250481/fail2ban-regex-where-ip-is-on-o ne-line-and-failure-message-on-another K <moe.ja...@sohnen-moe.com> apparently wrote: > Provide a sample log entry. > f2b can scan more than one line for matching text. _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users