From owner-freebsd-questions@freebsd.org  Wed Jul 27 18:20:23 2016
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7CA6ABA6FDD
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Wed, 27 Jul 2016 18:20:23 +0000 (UTC)
 (envelope-from ppathiakis@mail.atlantisservices.net)
Received: from messages.atlantisservices.net (atlantisservices.net
 [96.39.127.150])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 4B5EA160F
 for <freebsd-questions@freebsd.org>; Wed, 27 Jul 2016 18:20:22 +0000 (UTC)
 (envelope-from ppathiakis@mail.atlantisservices.net)
Received: from messages (messages.atlantisservices.net [172.24.0.25])
 by messages.atlantisservices.net (Postfix) with ESMTP id E94324D85
 for <freebsd-questions@freebsd.org>; Sun, 24 Jul 2016 16:58:26 +0000 (UTC)
X-Virus-Scanned: amavisd-new at atlantisservices.net
Received: from messages.atlantisservices.net ([172.24.0.25])
 by messages (messages.atlantisservices.net [172.24.0.25]) (amavisd-new,
 port 10024)
 with LMTP id tjTqzNhNY1Yg for <freebsd-questions@freebsd.org>;
 Sun, 24 Jul 2016 16:58:25 +0000 (UTC)
Received: from [192.168.0.29] (desktop4.192atlantisservices.net [192.168.0.29])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (No client certificate requested)
 by messages.atlantisservices.net (Postfix) with ESMTPSA id 8BA284D7D
 for <freebsd-questions@freebsd.org>; Sun, 24 Jul 2016 16:58:25 +0000 (UTC)
Subject: Re: Fail2ban python regex issue
To: freebsd-questions@freebsd.org
References: <1b35e652-1540-6eb3-9a6e-47a0cf4ce97a@yahoo.com>
 <20160724165545.0e784017@gumby.homeunix.com>
From: Paul Pathiakis <ppathiakis@mail.atlantisservices.net>
Message-ID: <f4bd4e28-b763-7073-77d2-7d9b52580d14@mail.atlantisservices.net>
Date: Sun, 24 Jul 2016 12:58:25 -0400
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101
 Thunderbird/45.1.1
MIME-Version: 1.0
In-Reply-To: <20160724165545.0e784017@gumby.homeunix.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Jul 2016 18:20:23 -0000

I've tried it with and without.  It still doesn't match. :-(

P.


On 07/24/2016 11:55, RW via freebsd-questions wrote:
> On Sat, 23 Jul 2016 17:06:53 -0400
> pathiaki2 via freebsd-questions wrote:
>
>> Hi,
>>
>> I'm extending fail2ban to catch things on FreeBSD.
>> ...
>> Jul 23 00:02:48 <machine FQDN> dovecot: auth:
>> ldap(valeria,91.200.12.148): unknown user (SHA1 of given password:
>> e557ee1b78fd6978af5ea1f614597f79dc13c40e)
>>
>> I'm trying this:
>>
>> ^%(__prefix_line)s(: auth: ldap\(\S+,<HOST>\):) unknown user\s*$
>>
>> What am I missing?  There's no error with the interpreter, it's just
>> not matching the line.
> I don't use fail2ban, so I may have misunderstood something, but the
> obvious answer is that the "\s*$" on the end of the regex shouldn't be
> there.
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"