mirror of
https://github.com/fail2ban/fail2ban.git
synced 2026-03-11 08:55:31 +00:00
capture user, add datepattern (anchored exact main format and fail2ban defaults)
This commit is contained in:
parent
11768a97e9
commit
6a2d2aa97a
1 changed files with 3 additions and 2 deletions
|
|
@ -25,10 +25,11 @@ _daemon = xrdp-sesman
|
|||
|
||||
[Definition]
|
||||
|
||||
authfail_re = \[INFO \] AUTHFAIL: user=.+ ip=<HOST> time=\d+
|
||||
authfail_re = \[INFO \] AUTHFAIL: user=<F-USER>.+</F-USER> ip=<ADDR> time=\d+
|
||||
|
||||
failregex = ^%(__prefix_line)s%(authfail_re)s$
|
||||
|
||||
ignoreregex =
|
||||
|
||||
|
||||
datepattern = ^\[?%%ExY%%Exm%%Exd[-|T]%%ExH:?%%ExM:?%%ExS(?:[.,]%%f)?(?:\s*%%z)?\]?
|
||||
^{DATE}
|
||||
|
|
|
|||
Loading…
Reference in a new issue