It's missing <host> so no, I dont think it will work. 

Anyone have any other suggestions?

Just to recap, looking for fail2ban regex that will match the following:

2016-09-16 08:42:48.729019 [DEBUG] sofia.c:9623 IP 89.163.231.172 Rejected by acl "domains". Falling back to Digest auth.

On Fri, Sep 16, 2016 at 9:21 AM, Russell Treleaven <rtreleaven@bunnykick.ca> wrote:

does this work?

^.+sofia.+Rejected by acl.+$

On Fri, Sep 16, 2016 at 10:14 AM, Don Hawkins <hawkins@hawkinsegroup.com> wrote:

Morning!

- Trying to match:

2016-09-16 08:42:48.729019 [DEBUG] sofia.c:9623 IP 89.163.231.172 Rejected by acl "domains". Falling back to Digest auth.

- I tried this regex:

^\.\d+ \[DEBUG\] sofia\.c:\d+ IP <HOST> Rejected by acl "domains"\. Falling back to Digest auth\.$

And no luck. 

Can anyone help? I can't figure out what I'm doing wrong, testing indicates no matches.

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

--

Sincerely,
Don Hawkins
CEO
Hawkins Enterprise Group LLC
http://hawkinsegroup.com
Zello PTT: push2don

P: 469-214-5044