Scroll to navigation

FAIL2BAN-REGEX(1) User Commands FAIL2BAN-REGEX(1)

NAME

fail2ban-regex - test Fail2ban "failregex" option

SYNOPSIS

fail2ban-regex [OPTIONS] <LOG> <REGEX> [IGNOREREGEX]

DESCRIPTION

Fail2Ban reads log file that contains password failure report and bans the corresponding IP addresses using firewall rules.

This tools can test regular expressions for "fail2ban".

LOG:

a string representing a log line
path to a log file (/var/log/auth.log)
search systemd journal (systemd-python required), optionally with backend parameters, see `man jail.conf` for usage and examples (systemd-journal[journalflags=1]).

REGEX:

a string representing a 'failregex'
name of filter, optionally with options (sshd[mode=aggressive])
path to a filter file (filter.d/sshd.conf)

IGNOREREGEX:

a string representing an 'ignoreregex'
path to a filter file (filter.d/sshd.conf)

OPTIONS

show program's version number and exit
show this help message and exit
set alternate config directory
set custom pattern used to match date/times
set time-zone used by convert time format
File encoding. Default: system locale
Raw hosts, don't resolve dns
DNS specified replacement of tags <HOST> in regexp ('yes' - matches all form of hosts, 'no' - IP addresses only)
maxlines for multi-line regex.
journalctl style matches overriding filter file. "systemd-journal" only
Log level for the Fail2Ban logger to use
get version in machine-readable short format
Increase verbosity
Set numerical level of verbosity (0..4)
Verbose date patterns/regex in output
Produce debuggex.com urls for debugging there
Disable check for all regex's
Set token to print failure information only (row, id, ip, msg, host, ip4, ip6, dns, matches, ...)
Do not print any missed lines
Do not print any ignored lines
Print all matched lines
Print all missed lines, no matter how many
Print all ignored lines, no matter how many
Enrich log-messages with compressed tracebacks
Either to make the tracebacks full, not compressed (as by default)

AUTHOR

Written by Cyril Jaquier <cyril.jaquier@fail2ban.org>. Many contributions by Yaroslav O. Halchenko, Steven Hiscocks, Sergey G. Brester (sebres).

REPORTING BUGS

Report bugs to https://github.com/fail2ban/fail2ban/issues

COPYRIGHT

Copyright © 2004-2008 Cyril Jaquier, 2008- Fail2Ban Contributors
Copyright of modifications held by their respective authors. Licensed under the GNU General Public License v2 (GPL).

SEE ALSO

fail2ban-client(1) fail2ban-server(1) jail.conf(5)

April 2024 fail2ban-regex 1.1.0