The good news is that fail2ban is working now.
The bad news is that I don't know why fail2ban is working now.
I copied a working jail in the /etc/fail2ban/jail.local and put that copy at the top of the file thinking that something
in the file might be causing jails near the bottom to not work r
On 2023-04-24 11:16, Wayne Sallee wrote:
> No. Why would I want to do that?
>
So that fail2ban-server sees the data log as a new file and starts scanning it
from the beginning.
The way you showed your configuration would fit into a shell script quite
easily. Change the data log filename for ea
Have not found the bug yet, but I see now, that it has nothing to do with regex, and setting fail2ban to debug level
gives nothing useful.
Wayne Sallee
wa...@waynesallee.com
http://www.WayneSallee.com
___
Fail2ban-users mailing list
Fail2ban-users@li
Original Message
*Subject: * Re: [Fail2ban-users] fail2ban-regex maches, but fail2ban does not
*From: * James Moe Via Fail2ban-users
*To: * Fail2ban-users
*CC: *
*Date: * 2023-4-22 03:34 PM
failregex = postfix.+ RCPT from unknown\[\]\: .+()
# Apr 16 11:00
Original Message
*Subject: * Re: [Fail2ban-users] fail2ban-regex maches, but fail2ban does not
*From: * Tim Boneko Via Fail2ban-users
*To: * Fail2ban-users
*CC: *
*Date: * 2023-4-22 01:42 AM
Am Freitag, dem 21.04.2023 um 15:32 -0400 schrieb Wayne Sallee
On 2023-04-21 12:32, Wayne Sallee via Fail2ban-users wrote:
> Looking at my test, you can see that I copied logs into the testing log file,
> so that fail2ban would see the new entries.
>
Hmm. Maybe. I never tried re-using a data log file.
Here are a couple of ideas:
- change the name of the
Am Freitag, dem 21.04.2023 um 15:32 -0400 schrieb Wayne Sallee via
Fail2ban-users:
>
> Looking at my test, you can see that I copied logs into the testing
> log file, so that fail2ban would see the new entries.
You can do so with fail2ban-regex, but (as far as i know/experience)
not with fail2ban
Original Message
*Subject: * Re: [Fail2ban-users] fail2ban-regex maches, but fail2ban does not
*From: * James Moe Via Fail2ban-users
*To: * Fail2ban-users
*CC: *
*Date: * 2023-4-21 02:29 PM
On 2023-04-21 06:25, Wayne Sallee via Fail2ban-users wrote:
I
On 2023-04-21 06:25, Wayne Sallee via Fail2ban-users wrote:
> I ran regular fail2ban, and fail2ban-regex at the same time. If you look, at
> my test, you can see what I did. Fail2ban
> did nothing, but fail2ban-regex matched 8.
>
What is "regular fail2ban"? Do you mean fail2ban-server?
fail2
Original Message
*Subject: * Re: [Fail2ban-users] fail2ban-regex maches, but fail2ban does not
*From: * James Moe Via Fail2ban-users
*To: * Fail2ban-users
*CC: *
*Date: * 2023-4-20 05:48 PM
On 2023-04-20 06:12, Wayne Sallee via Fail2ban-users wrote:
The
Original Message
*Subject: * Re: [Fail2ban-users] fail2ban-regex maches, but fail2ban does not
*From: * James Moe Via Fail2ban-users
*To: * Fail2ban-users
*CC: *
*Date: * 2023-4-20 05:48 PM
On 2023-04-20 06:12, Wayne Sallee via Fail2ban-users wrote:
The
On 2023-04-20 06:12, Wayne Sallee via Fail2ban-users wrote:
> The fail2ban-regex showed all 8 lines matching, but the regular fail2ban jail
> [testing] showed no action, not even a
> "found" response.
>
There is no command "fail2ban jail ...".
--
James Moe
moe dot james at sohnen-moe dot com
Original Message
*Subject: * Re: [Fail2ban-users] fail2ban-regex maches, but fail2ban does not
*From: * James Moe Via Fail2ban-users
*To: * Fail2ban-users
*CC: *
*Date: * 2023-4-19 04:47 PM
On 2023-04-19 09:18, Wayne Sallee via Fail2ban-users wrote
On 2023-04-19 09:18, Wayne Sallee via Fail2ban-users wrote:
> fail2ban-regex /var/log/fail2ban-jail-testing.log
> /etc/fail2ban/filter.d/testing.conf
> Lines: 8 lines, 0 ignored, 8 matched, 0 missed
>
I do not see the problem. It correctly matched 8 log entries.
> tail -F -n 100 /var/log/fail
Original Message
*Subject: * Re: [Fail2ban-users] fail2ban-regex maches, but fail2ban does not
*From: * Darac Marjal
*To: * Fail2ban-users
*CC: *
*Date: * 2023-4-17 04:06 PM
You might be running into escaping problems here. For instance, if you wanted to
On 17/04/2023 18:19, Wayne Sallee via Fail2ban-users wrote:
Original Message
*Subject: * Re: [Fail2ban-users] fail2ban-regex maches, but fail2ban
does not
*From: * James Moe Via Fail2ban-users
*To: * Fail2ban-users
*CC: *
*Date: * 2023-4-17 12:50 PM
On 2023-04-17 10:19, Wayne Sallee via Fail2ban-users wrote:
> My issue is that I can use an online regex like
> https://regex101.com
> and get matches.
> But use fail2ban-regex, and get worse results,
>
"My first thing is better than the second thing but I can't use the first
thing, and the thir
Original Message
*Subject: * Re: [Fail2ban-users] fail2ban-regex maches, but fail2ban does not
*From: * James Moe Via Fail2ban-users
*To: * Fail2ban-users
*CC: *
*Date: * 2023-4-17 12:50 PM
On 2023-04-17 08:27, Wayne Sallee via Fail2ban-users wrote:
Why
On 2023-04-17 08:27, Wayne Sallee via Fail2ban-users wrote:
> Why does fail2ban not match when fail2ban-regex does match?
> It makes fail2ban-regex almost useless.
>
Are you responding to another message?
Do you have a specific issue?
--
James Moe
moe dot james at sohnen-moe dot com
520.743.
19 matches
Mail list logo
