[arch-general] Archlinux fail2ban not working

Ralph Corderoy ralph at inputplus.co.uk
Fri Nov 1 23:51:14 UTC 2019


Hi Maykel,

> > How about
> >
> >     failregex = ^\S+: Unknown User .* \(<HOST>\)$
>
> Thanks for your help but not working...
> https://imgur.com/a/w0F2JSC

That image shows

    Unknown User .* \(<HOST>:.*\)

but that's not what I suggested, e.g. you have a colon after the <HOST>
and as there is no colon in ‘(109.103.148.2)’ then the regexp is not
going to match.

-- 
Cheers, Ralph.


More information about the arch-general mailing list