From 6fe3ad991c2f0f4126504d6519f0e9b7ec79e71e Mon Sep 17 00:00:00 2001 From: doddy Date: Fri, 30 Aug 2024 03:23:09 -0500 Subject: [PATCH] FIX regex Patern //spanish// el patron de log, solo es compatible con el usuario admin, sin contar los demas usuarios que podrian tener, y tambien sin contar el tipo de autenticacion como el "two factor code", por ejemplo --- setup/etc/fail2ban/filter.d/issabel-gui.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/setup/etc/fail2ban/filter.d/issabel-gui.conf b/setup/etc/fail2ban/filter.d/issabel-gui.conf index 803ccbd..9bd136c 100644 --- a/setup/etc/fail2ban/filter.d/issabel-gui.conf +++ b/setup/etc/fail2ban/filter.d/issabel-gui.conf @@ -15,7 +15,7 @@ __pid_re = (?:\[\d+\]) iso8601 = \d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d+[+-]\d{4} -failregex = ^(%(__prefix_line)s|\[\]\s*)LOGIN ([^:]*): Authentication Failure to Web Interface login. Failed password for admin from .$ +failregex = ^(%(__prefix_line)s|\[\]\s*)LOGIN ([^:]*): Authentication Failure to Web Interface login. Failed ([^:]*) for ([^:]*) from .$ ignoreregex =