jmurch Posted August 2, 2011 Share Posted August 2, 2011 I am configuring fail2ban so that it will capture a log input similar to this: err: bad or missing CDL header refused connect from 98.165.54.217:65174 [l:949] The regex that I have that's not working is this: failregex = err: bad or missing TDL header refused connect from \S+ \(<HOST>\)\s*$ I just want the host address not the full string with the port number. I don't know if fail2ban syntax is different than normal regex syntax. TIA, Jeff Link to comment https://forums.phpfreaks.com/topic/243609-fail2ban-regex/ Share on other sites More sharing options...
xyph Posted August 2, 2011 Share Posted August 2, 2011 What's fail2ban? This isn't 3rd party script support. Link to comment https://forums.phpfreaks.com/topic/243609-fail2ban-regex/#findComment-1250798 Share on other sites More sharing options...
requinix Posted August 2, 2011 Share Posted August 2, 2011 But this one is I figure there's more need for fail2ban help than regex help. Link to comment https://forums.phpfreaks.com/topic/243609-fail2ban-regex/#findComment-1250813 Share on other sites More sharing options...
jmurch Posted August 3, 2011 Author Share Posted August 3, 2011 no one? Link to comment https://forums.phpfreaks.com/topic/243609-fail2ban-regex/#findComment-1251365 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.