Sergey G. Brester

Fail2ban self does it... it looks rather as an issue of ConfigReader's and/or ExtractOptions (by supplying to the action "sendmail-geoip-lines"). Currently I don't know which versions are affected (0.9 is...

yw > using `` info instead of the log-files Oh, forgotten that we had a grave issue with not proper "escaped" `` - #1726 (fixed for >= 0.10), so be...

Not this way directly, but we don't want to provide here any advices for script-kiddis :) But I have one advice for you - just upgrade your fail2ban and relax.

> Zoneminder recently released a new version 1.34 and the method for authentication changed and is now logged differently. Well I'm not sure... perhaps it simply depends on deployment (or...

No, I don't think so, it is enough to anchor it to begin only: ```ini failregex = ^\s*web_php\[\d+\]\.ERR \[\] \[(?:Could not retrieve user|Login denied for user) \S+ datepattern = ^%%m/%%d/%%y...

> So your say'n I can remove the old zoneminder.conf and just put it in the jail.local for 0.10.2, right? You don't need to remove something. And yes you can...

> However after forcing failed attempts What is your point? You may why you don't see new attempts? If so, I don't know - it said in both tries `25...

I don't know you timezone, but times you see in output of fail2ban-regex look obsolete to me. And may be the missed line said exactly what you miss: `02/27/20 10:11:51.464819...

> are the ports definitions read from the /etc/services file? It depends on which banaction is used (fail2ban supply it to the action as it is specified without internal modifications)....

> Found this in the fail2ban.log: > 2020-02-27 13:28:51,212 fail2ban.actions [3840]: ERROR Failed to start jail 'zoneminder' action 'iptables-multiport': Error starting action Jail('zoneminder')/iptables-multiport This is just a first message, which...