CODEWITHSUNDEEP
fail2ban
stackunderflow
stackunderflow

Reputation: 1

searching a fail2ban regex expression for FlashMQ

I´m searching a regex expression for my flashmq.log, for example: [2025-01-13 08:26:40.077] [NOTICE] [main] Accepting connection from: address='199.45.155.91', transport='TCP/Websocket/SSL', fd=20 [2025-01-13 08:26:40.078] [ERROR] [T 0] Packet read/write error: Problem accepting SSL socket: error:0A0000C1:SSL routines::no shared cipher. Removing client [ClientID='', username='', fd=20, keepalive=10s, transport='TCP/Websocket/SSL', address='199.45.155.91', prot=none, clean=0] [2025-01-13 08:26:40.078] [NOTICE] [T 0] Removing client '[ClientID='', username='', fd=20, keepalive=10s, transport='TCP/Websocket/SSL', address='199.45.155.91', prot=none, clean=0]'. Reason(s): Problem accepting SSL socket: error:0A0000C1:SSL routines::no shared cipher

My idea was like: failregex = ^Problem accepting SSL.*<HOST>.*$

But I am not a regex expert, sorry.

Upvotes: 0

Views: 14

Answers (0)

Related Questions