It is falling over the [^[]. I think it is because [ is a metacharacter it needs to be escaped to mean the character "[". If you change it to [^\[] then it works.
On 12/08/2016 15:44, Jacques Lav!gnotte. wrote: > Thanks to Nick for the nice advices related to postfix. I alse have some > set. > > > I re-issue my question cause I would like to solve it thru fail2ban : > > > I wonder why this log line : > > Aug 10 23:56:35 emf postfix/smtpd[26006]: improper command pipelining > after HELO from unknown[113.57.97.103]: QUIT\r\n" \ > > does not match to : > > ^%(__prefix_line)simproper command pipelining after \S+ from > [^[]*\[<HOST>\]:.*$ > > as the fail2ban rules set with the package. > > > TIA, Jacques > > > ------------------------------------------------------------------------------ What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the most bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports. http://sdm.link/zohodev2dev _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
