Hi there,
well i wanna create a little more complex (for me) regex filter to more secure a custom app server...
here the log I am taking from app (need two lines at raw - with IP + error line - they are different...)
So when Fail2Ban see these two lines at the row... I wanna count it... so 3rd time (5.62.xx.xx will goodbye the server)....
my problem is the regex - I thought that this filter will do the job...
But Fail2ban.log not count it at all...
Where am I wrong... any idea...?
Thanks in advance !!!
well i wanna create a little more complex (for me) regex filter to more secure a custom app server...
here the log I am taking from app (need two lines at raw - with IP + error line - they are different...)
B4X:
...
1658382995: New connection from 5.62.xx.xx on port 15321.
1658382996: Socket error on client <unknown>, disconnecting.
...So when Fail2Ban see these two lines at the row... I wanna count it... so 3rd time (5.62.xx.xx will goodbye the server)....
my problem is the regex - I thought that this filter will do the job...
B4X:
^New connection from <HOST> on port 15321.$^Socket error on client *.$But Fail2ban.log not count it at all...
Where am I wrong... any idea...?
Thanks in advance !!!