Re: [arch-general] Archlinux fail2ban not working

2019-11-09 Thread Ralph Corderoy
Hi Maykel, > > > > failregex = ^\S+: Unknown User .* \(\)$ > > > > > > Thanks for your help but not working... > > > https://imgur.com/a/w0F2JSC > > > > That image shows > > > > Unknown User .* \(:.*\) > > > > but that's not what I suggested, e.g. you have a colon after the > > and as

Re: [arch-general] Archlinux fail2ban not working

2019-11-02 Thread Maykel Franco via arch-general
El sáb., 2 nov. 2019 a las 0:51, Ralph Corderoy () escribió: > > Hi Maykel, > > > > How about > > > > > > failregex = ^\S+: Unknown User .* \(\)$ > > > > Thanks for your help but not working... > > https://imgur.com/a/w0F2JSC > > That image shows > > Unknown User .* \(:.*\) > > but that's

Re: [arch-general] Archlinux fail2ban not working

2019-11-01 Thread Ralph Corderoy
Hi Maykel, > > How about > > > > failregex = ^\S+: Unknown User .* \(\)$ > > Thanks for your help but not working... > https://imgur.com/a/w0F2JSC That image shows Unknown User .* \(:.*\) but that's not what I suggested, e.g. you have a colon after the and as there is no colon in

Re: [arch-general] Archlinux fail2ban not working

2019-11-01 Thread Maykel Franco via arch-general
El sáb., 2 nov. 2019 a las 0:13, Maykel Franco () escribió: > > El vie., 1 nov. 2019 a las 19:20, Ralph Corderoy > () escribió: > > > > Hi Maykel, > > > > I don't use fail2ban, but I've just skimmed > > https://fail2ban.readthedocs.io/en/latest/filters.html#developing-filter-regular-expressions >

Re: [arch-general] Archlinux fail2ban not working

2019-11-01 Thread Maykel Franco via arch-general
El vie., 1 nov. 2019 a las 19:20, Ralph Corderoy () escribió: > > Hi Maykel, > > I don't use fail2ban, but I've just skimmed > https://fail2ban.readthedocs.io/en/latest/filters.html#developing-filter-regular-expressions > You may find the ‘debuggex’ reference useful. > > > failregex = Unknown User

Re: [arch-general] Archlinux fail2ban not working

2019-11-01 Thread Ralph Corderoy
Hi Maykel, I don't use fail2ban, but I've just skimmed https://fail2ban.readthedocs.io/en/latest/filters.html#developing-filter-regular-expressions You may find the ‘debuggex’ reference useful. > failregex = Unknown User .* \(:.*\) ... > [12:48:35.315] Server1: Unknown User 'test'

Re: [arch-general] Archlinux fail2ban not working

2019-11-01 Thread Maykel Franco via arch-general
El vie., 1 nov. 2019 17:32, Justin Capella via arch-general < arch-general@archlinux.org> escribió: > Your regex doesn't look like it would match. If is substituted for > your hostname that part of the regex would need to be before the unknown > user part > > On Fri, Nov 1, 2019, 2:51 AM Maykel

Re: [arch-general] Archlinux fail2ban not working

2019-11-01 Thread Justin Capella via arch-general
Your regex doesn't look like it would match. If is substituted for your hostname that part of the regex would need to be before the unknown user part On Fri, Nov 1, 2019, 2:51 AM Maykel Franco via arch-general < arch-general@archlinux.org> wrote: > Hi, I have this rule: > > jail.conf: > >