Package: fail2ban Version: 0.7.5-2 Severity: grave Justification: renders package unusable
*** Please type your report below this line *** At least for Apache error.log logs, it looks like fail2ba doesn't recognize dates with days < 10 when the day of month doesn't have a leading zero. How to reproduce: $ fail2ban-regex '[Tue May 1 17:41:55 2007] [warn] [client 192.168.0.1] user foo authentication failure' '[[]client <HOST>[]] user .*(?: authentication failure|not found)' Found a match but no valid date/time found for [Tue May 1 17:41:55 2007] [warn] [client 192.168.0.1] user foo authentication failure. Please contact the author in order to get support for this format Sorry, no match # Now with a leading zero on day of month: $ fail2ban-regex '[Tue May 01 17:41:55 2007] [warn] [client 192.168.0.1] user foo authentication failure' '[[]client <HOST>[]] user .*(?: authentication failure|not found)' Success, the following data were found: Date: Tue May 01 17:41:55 2007 IP : 192.168.0.1 Date template hits: 0 hit: Month Day Hour:Minute:Second 1 hit: Weekday Month Day Hour:Minute:Second Year 0 hit: Year/Month/Day Hour:Minute:Second 0 hit: Day/Month/Year:Hour:Minute:Second 0 hit: TAI64N 0 hit: Epoch Benchmark. Executing 1000... Performance Avg: 0.1185610294342041 ms Max: 0.247955322265625 ms (Run 0) Min: 0.11682510375976562 ms (Run 996) -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-4-k7 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages fail2ban depends on: ii iptables 1.3.6.0debian1-5 administration tools for packet fi ii lsb-base 3.1-23.1 Linux Standard Base 3.1 init scrip ii python 2.4.4-2 An interactive high-level object-o ii python-central 0.5.12 register and build utility for Pyt ii python2.4 2.4.4-3 An interactive high-level object-o fail2ban recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
