2018-07-12 03:52:00 +02:00
|
|
|
# Fail2Ban configuration file
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
[Definition]
|
|
|
|
|
|
|
|
|
|
# Option: failregex
|
|
|
|
|
# Notes.: regex to match the password failures messages in the logfile. The
|
|
|
|
|
# host must be matched by a group named "host". The tag "<HOST>" can
|
|
|
|
|
# be used for standard IP/hostname matching and is only an alias for
|
|
|
|
|
# (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
|
|
|
|
|
# Values: TEXT
|
|
|
|
|
#
|
|
|
|
|
#[WARNING] sofia_reg.c:1792 SIP auth challenge (INVITE) on sofia profile 'internal' for [+972592277524@xxx.xxx.xxx.xxx] from ip 209.160.120.12
|
2018-07-12 06:29:33 +02:00
|
|
|
failregex = \[WARNING\] sofia_reg.c:1792 SIP auth challenge \(INVITE\) on sofia profile \'\w+\' for \[.*@\d+.\d+.\d+.\d+\] from ip <HOST>
|
2018-07-12 03:52:00 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
# Option: ignoreregex
|
|
|
|
|
# Notes.: regex to ignore. If this regex matches, the line is ignored.
|
|
|
|
|
# Values: TEXT
|
|
|
|
|
#
|
|
|
|
|
ignoreregex =
|
