[Freeswitch-users] fail2ban regex

[Don Hawkins]

It's missing <host> so no, I dont think it will work.

Anyone have any other suggestions?

Just to recap, looking for fail2ban regex that will match the following:

2016-09-16 08:42:48.729019 [DEBUG] sofia.c:9623 IP 89.163.231.172 Rejected
by acl "domains". Falling back to Digest auth.


On Fri, Sep 16, 2016 at 9:21 AM, Russell Treleaven <rtreleaven at bunnykick.ca>
wrote:

> does this work?
> ^.+sofia.+Rejected by acl.+$
>
> On Fri, Sep 16, 2016 at 10:14 AM, Don Hawkins <hawkins at hawkinsegroup.com>
> wrote:
>
>> Morning!
>>
>>
>> - Trying to match:
>>
>> 2016-09-16 08:42:48.729019 [DEBUG] sofia.c:9623 IP 89.163.231.172
>> Rejected by acl "domains". Falling back to Digest auth.
>>
>>
>> - I tried this regex:
>>
>> ^\.\d+ \[DEBUG\] sofia\.c:\d+ IP <HOST> Rejected by acl "domains"\.
>> Falling back to Digest auth\.$
>>
>>
>> And no luck.
>>
>> Can anyone help? I can't figure out what I'm doing wrong, testing
>> indicates no matches.
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>



-- 
<http://teleoh.com>

*Sincerely,*
Don Hawkins
CEO
Hawkins Enterprise Group LLC
http://hawkinsegroup.com
Zello PTT <http://zello.com>: push2don
P: 469-214-5044
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20160916/76c12850/attachment.html