Index: fail2ban-fail2ban-a20d1f8/config/filter.d/sshd.conf =================================================================== --- fail2ban-fail2ban-a20d1f8.orig/config/filter.d/sshd.conf +++ fail2ban-fail2ban-a20d1f8/config/filter.d/sshd.conf @@ -31,8 +31,8 @@ failregex = ^%(__prefix_line)s(?:error: ^%(__prefix_line)sUser .+ from not allowed because not listed in AllowUsers$ ^%(__prefix_line)sauthentication failure; logname=\S* uid=\S* euid=\S* tty=\S* ruser=\S* rhost=(?:\s+user=.*)?\s*$ ^%(__prefix_line)srefused connect from \S+ \(\)\s*$ - ^%(__prefix_line)sAddress .* POSSIBLE BREAK-IN ATTEMPT!*\s*$ - ^%(__prefix_line)sUser .+ from not allowed because none of user's groups are listed in AllowGroups\s*$ + ^%(__prefix_line)sreverse mapping checking getaddrinfo for .* \[\] .* POSSIBLE BREAK-IN ATTEMPT!*\s*$ + ^%(__prefix_line)sUser \S+ from not allowed because none of user's groups are listed in AllowGroups\s*$ # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored.