From 5f87e5991139db1b3d2961d00ad318cf6cb64272 Mon Sep 17 00:00:00 2001 From: Steven Hiscocks Date: Mon, 27 May 2013 22:07:30 +0100 Subject: [PATCH] DOC: Update man page for usage --- man/jail.conf.5 | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/man/jail.conf.5 b/man/jail.conf.5 index 14dc5663..466172f5 100644 --- a/man/jail.conf.5 +++ b/man/jail.conf.5 @@ -135,8 +135,9 @@ There are two filter definitions used in the [Definition] section: .TP \fBfailregex\fR -is the regex (\fBreg\fRular \fBex\fRpression) that will match failed attempts. The tag is used as part of the regex and is itself a regex +is the regex (\fBreg\fRular \fBex\fRpression) that will match failed attempts. The tag \fI\fR is used as part of the regex and is itself a regex for IPv4 addresses and hostnames. fail2ban will work out which one of these it actually is. +For multiline regexs the tag \fI\fR should be used to separate lines. This allows lines between the matched lines to continue to be searched for other failures. The tag can be used multiple times. .TP \fBignoreregex\fR