Fantastic!
You are correct - often, when you see <instruction> it means you replace it.
But fail2ban actually uses <this> a LOT. So, if you see any instructions or
guidance and it says "<here>", it really does mean that you must write it
exactly.
Ok so now we have one thing working, shall we try to do more? :-)
On Fri, 10 Aug 2018 at 19:13, Wayne Sallee <[email protected]> wrote:
> Wow! That actually works!
>
> I tried it before without the "<HOST>" and it errored. Usually when one
> gives <something> in instructions, that something is to be replaced, but
> running it as "<HOST>", is really the answer.
>
> Thanks!
>
> Wayne Sallee
> [email protected]
> http://www.WayneSallee.com
>
> On 08/10/2018 01:41 PM, Tony Collins wrote:
>
> Because the IP address of the computer that's "attacking" you is the most
> vital piece of information. So, when fail2ban scans your log files, it only
> wants to look at lines that have an IP address in it.
>
> So: "host" actually means "the IP address of the other person's computer".
> Sometimes the language can be confusing!
>
> If you look at the really big log file line that you posted, the "host" -
> the IP address of the other computer - was the first thing in the log line.
>
>
> On Fri, 10 Aug 2018 at 18:38, Wayne Sallee <[email protected]> wrote:
>
>> Why is host required?
>>
>> Wayne Sallee
>> [email protected]
>> http://www.WayneSallee.com
>>
>> On 08/10/2018 01:15 PM, Tony Collins wrote:
>>
>> The failregex I just gave you will work for it - you can test it like
>> this:
>>
>> fail2ban-regex logfile.log "<HOST>.*JDatabaseDriverMysql"
>> --print-all-matched
>>
>> Just replace logfile.log with the filename that has the offending log
>> line in it
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> _______________________________________________
>> Fail2ban-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/fail2ban-users
>>
> --
> -- Tony Collins
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
> _______________________________________________
> Fail2ban-users mailing
> [email protected]https://lists.sourceforge.net/lists/listinfo/fail2ban-users
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Fail2ban-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/fail2ban-users
>
--
-- Tony Collins
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
