Mostrando las entradas con la etiqueta alinux. Mostrar todas las entradas

Correct fail2ban filter for sshd on Amazon Linux

Fail2ban does not catch the regular expression for Invalid or Illegal ssh logins on Amazon Linux. So far the fix goes like this:

Not matching regex:
^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST>\s*$

Matching regex:
^%(__prefix_line)s[iI](?:llegal|nvalid) user .* from <HOST>.*\s*$

Enjoy