From owner-freebsd-questions@freebsd.org Sun Jul 24 15:55:55 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4BB4CBA3F5C for ; Sun, 24 Jul 2016 15:55:55 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-wm0-x234.google.com (mail-wm0-x234.google.com [IPv6:2a00:1450:400c:c09::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 0036912C8 for ; Sun, 24 Jul 2016 15:55:54 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: by mail-wm0-x234.google.com with SMTP id q128so108365303wma.1 for ; Sun, 24 Jul 2016 08:55:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=date:from:to:subject:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=wsoz1t5dpKs7b4acneVJq/s3DLCL6/3bbmJjeo874WI=; b=iLkmJ7zR2MUGN56mPuk5cx+0F3MzR1mH+8XZIzalr+cQPvweo7+JJe87I305tQr0M9 /bGEcDVQFrR0LWzUS8r0AoXKnBkdnBTfLUxMhg4wXp+VHBNqwVvMHHHrWyCeps9DR4d+ z4pcs/pk0jogjL3IzBozIltTfKFcld091cNIFub9RTT+J3Tozq3c/kJVNCrMuWfRzp8H UXxfhprQS9mHAoaEu0GbAmWSWgdiUNplwFYyVZZ7Z28ytUDL7T4Qwm8asqN1vJUP9Vtq ThQimE8X2cPAN2ZcIWxLeFUmdGB3y+e1GI2ugpw3wWR2gw5YhgZrCQQAl2k9vqS1xRV7 IT8Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=wsoz1t5dpKs7b4acneVJq/s3DLCL6/3bbmJjeo874WI=; b=UifmZ1IZyiHvJeZtopqpSZYJp6DSBBkNSepaVeCgU534rHfAZOM2OfUr8Ms8Hpb4UD 3B+KYRRsGueo6e2bfL3w+Nq/7cmgvfNpiqtg1i5Jrh3kDKS9t9YQuYsqWrjv1QXgie8I jjObgs6ibcgGiNCZVaCJLmBAPAxvs+c8EEnHYzUfgcupumyCGO7Xa9xv3yoWCmZXluNA JSerwNJlMBulzwU0k1a9XlmVMwHSu1n1VobXPf+NYlWsYg39324PbMSnmOAF72HgxNbU oAqOKuYGGXvIGswz07pkQs5PhshUKhUuG+xMDkEMD9hhdTLpyteUSjSk64cN+q2/zXYf YfLQ== X-Gm-Message-State: AEkoousdMY9MLwHxfUSkJqQ128+qJR1/x2yP0IszPXHJTBjX8wuvWZ7poffYwnIOhBSCLw== X-Received: by 10.194.80.104 with SMTP id q8mr11995784wjx.151.1469375753162; Sun, 24 Jul 2016 08:55:53 -0700 (PDT) Received: from gumby.homeunix.com ([81.171.74.122]) by smtp.gmail.com with ESMTPSA id m62sm22875414wmm.24.2016.07.24.08.55.49 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Sun, 24 Jul 2016 08:55:51 -0700 (PDT) Date: Sun, 24 Jul 2016 16:55:45 +0100 From: RW To: freebsd-questions@freebsd.org Subject: Re: Fail2ban python regex issue Message-ID: <20160724165545.0e784017@gumby.homeunix.com> In-Reply-To: <1b35e652-1540-6eb3-9a6e-47a0cf4ce97a@yahoo.com> References: <1b35e652-1540-6eb3-9a6e-47a0cf4ce97a@yahoo.com> X-Mailer: Claws Mail 3.13.2 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Jul 2016 15:55:55 -0000 On Sat, 23 Jul 2016 17:06:53 -0400 pathiaki2 via freebsd-questions wrote: > Hi, > > I'm extending fail2ban to catch things on FreeBSD. > ... > Jul 23 00:02:48 dovecot: auth: > ldap(valeria,91.200.12.148): unknown user (SHA1 of given password: > e557ee1b78fd6978af5ea1f614597f79dc13c40e) > > I'm trying this: > > ^%(__prefix_line)s(: auth: ldap\(\S+,\):) unknown user\s*$ > > What am I missing? There's no error with the interpreter, it's just > not matching the line. I don't use fail2ban, so I may have misunderstood something, but the obvious answer is that the "\s*$" on the end of the regex shouldn't be there.