ransomware-samba-ban
ransomware-samba-ban copied to clipboard
Excluding problematic FSRM extension
Hi,
Thank you for taking the time to write such a useful piece of code.
I am having problem with one of the patterns in FSRM: oor..* This matches way too often ('door', 'poor', etc), anywhere in the samba log.
What is the correct way to exclude it?