Hi Kenyon, thanks for the report/patch...  since it is the same
function which is used by fail2ban-server as well:  I assuming banning
upon invalid attempts didn't work either before, right?

On Sat, 09 Jul 2011, Kenyon Ralph wrote:

> Package: fail2ban
> Version: 0.8.4-3
> Severity: normal
> File: /usr/bin/fail2ban-regex
> Tags: patch upstream

> I noticed that fail2ban-regex reports the wrong time for matches with
> ISO 8601 timestamps, as used by rsyslog by default.

> Example:

> $ fail2ban-regex "2011-07-03T08:22:22.129317+00:00 darwin sshd[461]: Invalid 
> user git from 199.17.59.5" /etc/fail2ban/filter.d/sshd.conf
> [...]
> [5]
>     199.17.59.5 (Sun Jul 03 09:22:22 2011)

> Notice that the time is an hour ahead of that given on the command
> line. This is because iso8601.py disregards the current state of DST
> and instead gives a fixed-offset tzinfo in the datetime object it
> returns.

> A patch that works for me is attached.

-- 
=------------------------------------------------------------------=
Keep in touch                                     www.onerussian.com
Yaroslav Halchenko                 www.ohloh.net/accounts/yarikoptic



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to