diff options
| author | sebres <serg.brester@sebres.de> | 2022-02-08 19:21:37 +0100 |
|---|---|---|
| committer | sebres <serg.brester@sebres.de> | 2022-02-08 19:21:37 +0100 |
| commit | 810386a265d621a0af9f4917f68fae9bf95d1ba4 (patch) | |
| tree | 9216d1af11ac276d9f480a66e5e22c9ecf04d840 /config | |
| parent | c7ae74ce178adb819cdb3342a248c4e30346bd33 (diff) | |
| download | fail2ban-810386a265d621a0af9f4917f68fae9bf95d1ba4.tar.gz | |
filter.d/dovecot.conf: parse everything in parenthesis by auth-worker info, e. g. can match (pid=...,uid=...) too
(amend to 92f90038fa67d719c55c75f5eff8059e849fe747)
Diffstat (limited to 'config')
| -rw-r--r-- | config/filter.d/dovecot.conf | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/config/filter.d/dovecot.conf b/config/filter.d/dovecot.conf index 9c817720..b1df82f2 100644 --- a/config/filter.d/dovecot.conf +++ b/config/filter.d/dovecot.conf @@ -8,7 +8,7 @@ before = common.conf [Definition] _auth_worker = (?:dovecot: )?auth(?:-worker)? -_auth_worker_info = (?:conn \w+:auth(?:-worker)? \(uid=\w+\): auth(?:-worker)?<\d+>: )? +_auth_worker_info = (?:conn \w+:auth(?:-worker)? \([^\)]+\): auth(?:-worker)?<\d+>: )? _daemon = (?:dovecot(?:-auth)?|auth) prefregex = ^%(__prefix_line)s(?:%(_auth_worker)s(?:\([^\)]+\))?: )?(?:%(__pam_auth)s(?:\(dovecot:auth\))?: |(?:pop3|imap|managesieve|submission)-login: )?(?:Info: )?%(_auth_worker_info)s<F-CONTENT>.+</F-CONTENT>$ |