salut a tous
voila mon probleme je viens de voir que fail2ban 0.8.13 a du mal a comprendre les logs apache 2.4
voici un extrait de mon error.log d'apache
[Fri Apr 29 20:45:24.801272 2016] [core:info] [pid 30938] [client XXX.XXX.XXX.XXX:61866] AH00128: File does not exist: /var/www/html/TestNoExist
et quand je lance un test de regle je n'ai aucun "match" que des "miss"
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
|
fail2ban-regex /var/log/apache2/error.log /etc/fail2ban/filter.d/apache-nohome.conf
Running tests
=============
Use failregex file : /etc/fail2ban/filter.d/apache-nohome.conf
Use log file : /var/log/apache2/error.log
Results
=======
Failregex: 0 total
Ignoreregex: 0 total
Date template hits:
|- [# of hits] date format
| [24924] WEEKDAY MONTH Day Hour:Minute:Second[.subsecond] Year
`-
Lines: 24924 lines, 0 ignored, 0 matched, 24924 missed
Missed line(s): too many to print. Use --print-all-missed to print all 24924 lines |
je suis le seul a rencontrer ce probleme ?
Partager