Wow! That actually works!
I tried it before without the "<HOST>" and it errored. Usually when one gives <something> in instructions, that
something is to be replaced, but running it as "<HOST>", is really the answer.
Thanks!
Wayne Sallee
wa...@waynesallee.com
http://www.WayneSallee.com
On 08/10/2018 01:41 PM, Tony Collins wrote:
Because the IP address of the computer that's "attacking" you is the most vital piece of information. So, when
fail2ban scans your log files, it only wants to look at lines that have an IP address in it.
So: "host" actually means "the IP address of the other person's computer".
Sometimes the language can be confusing!
If you look at the really big log file line that you posted, the "host" - the IP address of the other computer - was
the first thing in the log line.
On Fri, 10 Aug 2018 at 18:38, Wayne Sallee <wa...@waynesallee.com
<mailto:wa...@waynesallee.com>> wrote:
Why is host required?
Wayne Sallee
wa...@waynesallee.com <mailto:wa...@waynesallee.com>
http://www.WayneSallee.com
On 08/10/2018 01:15 PM, Tony Collins wrote:
The failregex I just gave you will work for it - you can test it like this:
fail2ban-regex logfile.log "<HOST>.*JDatabaseDriverMysql"
--print-all-matched
Just replace logfile.log with the filename that has the offending log line
in it
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org!
http://sdm.link/slashdot_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
<mailto:Fail2ban-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
--
-- Tony Collins
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
