Hi peoples,
normally I'd lurk much longer on a list, but this problem is making me
more than a little insane and I'm hoping someone can point me down the
right path to fix my error.
I've started making some custom fail2ban rules, actions and the like,
one is based on apache/http log traffic, the regex I'm using in my
filter.conf file is:
failregex = ^<HOST> - .* \[\] ".*\\x.*" 5\d\d \d+ .*$
^<HOST> - .* \[\] ".*\\x.*" 4\d\d \d+ .*$
fail2ban-regex testing leads me to believe that it's picking up the
lines that I want to work on, but info from fail2ban to syslog makes it
look like there are problems:
Jul 8 15:16:30 blackrock fail2ban.filterpyinotify[28131]: ERROR Error
in FilterPyinotify callback: illegal IP address string passed to inet_aton
Jul 8 15:21:30 blackrock fail2ban.filterpyinotify[28131]: ERROR Error
in FilterPyinotify callback: illegal IP address string passed to inet_aton
my test log message that I'm sending in looks a bit like:
192.168.0.160 - - [08/Jul/2016:15:08:00 -0400] "\\x\\x\\x\\x\\x" 501 304
"-" "-"
that seems to end up throwing that message.
the only similar references that I could find in googling problems like
this had to do with 0.8.x compared to 0.9.x and the use of ignoreip
with ',' instead of " " as a seperator, but I'm running a 0.9.x version
of code and changing to a " " from ',' seems to have no effect.
[root@blackrock fail2ban]# fail2ban-server --version
Fail2Ban v0.9.3
Copyright (c) 2004-2008 Cyril Jaquier, 2008- Fail2Ban Contributors
Copyright of modifications held by their respective authors.
Licensed under the GNU General Public License v2 (GPL).
Written by Cyril Jaquier <[email protected]>.
Many contributions by Yaroslav O. Halchenko <[email protected]>.
this is on a centos 6 machine if that has any bearing.
thanks for any pointers.
--
public gpg key id: 0x5B8147CB
------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
