diff options
| author | Sergey G. Brester <serg.brester@sebres.de> | 2022-11-18 12:31:11 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-11-18 12:31:11 +0100 |
| commit | 996553f33015547fd2872564bc212ed974b87620 (patch) | |
| tree | 898c0e9b3c6d7ba3eefe7a263685568838af2466 | |
| parent | df91b047d2104e0dd26636d2cea33b480538c919 (diff) | |
| download | fail2ban-996553f33015547fd2872564bc212ed974b87620.tar.gz | |
review, simplify regex and capture user name
| -rw-r--r-- | config/filter.d/dante.conf | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/config/filter.d/dante.conf b/config/filter.d/dante.conf index d95f96b4..986f1946 100644 --- a/config/filter.d/dante.conf +++ b/config/filter.d/dante.conf @@ -9,7 +9,7 @@ before = common.conf [Definition] _daemon = danted -failregex = ^%(__prefix_line)sinfo: block\(1\): tcp/accept \]: <HOST>\.\d+ [\d.]+: error after reading \d+ bytes? in \d+ seconds?: (could not access user "\w+"'s records in the system password file: no system error|system password authentication failed for user "\w+")$ +failregex = ^%(__prefix_line)sinfo: block\(1\): tcp/accept \]: <HOST>\.\d+ [\d.]+: error after reading \d+ bytes? in \d+ seconds?: (could not access |system password authentication failed for )user "<F-USER>[^"]+</F-USER>" [Init] journalmatch = _SYSTEMD_UNIT=danted.service |