Date: Fri, 22 Jun 2018 22:43:24 +0200 From: Michael Grimm <trashcan@ellael.org> To: Ed Schouten <ed@nuxi.nl> Cc: "ed@FreeBSD.org" <ed@freebsd.org>, theis@gmx.at, Gleb Smirnoff <glebius@freebsd.org>, FreeBSD-STABLE Mailing List <freebsd-stable@freebsd.org>, Mailing List FreeBSD Ports <freebsd-ports@freebsd.org> Subject: Re: py-fail2ban turned silent after syslogd rollout (r335059, stable/11) Message-ID: <636B4CDC-CAF6-4AF8-B025-00C3CC9D826C@ellael.org> In-Reply-To: <CABh_MKnGLVtaDZ0_0p2N2JEOBHrOV%2Bryz2bf_1yCJjQHoCJ9OQ@mail.gmail.com> References: <590A1B87-464D-455C-A03D-9908EB7AF286@ellael.org> <20180622155922.GA61217@plan-b.pwste.edu.pl> <697FFEFE-6AFB-45CE-ADCD-4DB10286E68B@ellael.org> <CABh_MKkdObTmbNXnKrudyHjkd8s3aukUUC=Vee%2BRShJepWpwNg@mail.gmail.com> <851C065F-0E02-425C-B4AF-8FCE0E405F8E@ellael.org> <1A5B44D8-28B0-49C9-B88D-EE6EBEE8788D@ellael.org> <CABh_MKnGLVtaDZ0_0p2N2JEOBHrOV%2Bryz2bf_1yCJjQHoCJ9OQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 22. Jun 2018, at 22:28, Ed Schouten <ed@nuxi.nl> wrote: > 2018-06-22 22:06 GMT+02:00 Michael Grimm <trashcan@ellael.org>: >> After applying your patch: >> Jun 22 21:22:01 HOSTNAME <daemon.notice> [31033]: NOTICE = [JAILNAME] Unban x.x.x.x >>=20 >> Watch: 'fail2ban.actions' -the service- is missing. >=20 > That's likely due to the fact that it now interprets the first word in > the message as the remote hostname, which gets discarded. >=20 > Attached is a somewhat refined patch that only tries to parse the > hostname in remote messages if they are preceded by a timestamp. If > the timestamp is missing, it assumes the entire payload is the > message. Can you give this one a try? Thanks! Great, you fixed it again in very short time, and I really do appreciate = this! Now with patch v2: Jun 22 22:39:59 HOSTNAME <daemon.notice> fail2ban.actions = [72605]: NOTICE [JAILNAME] Restore Ban x.x.x.x Thank you very, very much, Michael
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?636B4CDC-CAF6-4AF8-B025-00C3CC9D826C>