jmurch Posted August 2, 2011 Share Posted August 2, 2011 I am configuring fail2ban so that it will capture a log input similar to this: err: bad or missing CDL header refused connect from 98.165.54.217:65174 [l:949] The regex that I have that's not working is this: failregex = err: bad or missing TDL header refused connect from \S+ \(<HOST>\)\s*$ I just want the host address not the full string with the port number. I don't know if fail2ban syntax is different than normal regex syntax. TIA, Jeff Quote Link to comment Share on other sites More sharing options...
xyph Posted August 2, 2011 Share Posted August 2, 2011 What's fail2ban? This isn't 3rd party script support. Quote Link to comment Share on other sites More sharing options...
requinix Posted August 2, 2011 Share Posted August 2, 2011 But this one is I figure there's more need for fail2ban help than regex help. Quote Link to comment Share on other sites More sharing options...
jmurch Posted August 3, 2011 Author Share Posted August 3, 2011 no one? Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.