Fail2ban does not catch the regular expression for Invalid or Illegal ssh logins on Amazon Linux. So far the fix goes like this:
Not matching regex:
^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST>\s*$
Matching regex:
^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST>.*\s*$
Enjoy
No hay comentarios.:
Publicar un comentario