How do I create regex for fail2ban.
Nothing goes to jail
Had a google and a look at:
http://linux.die.net/man/1/fail2ban-regex
http://www.fail2ban.org/wiki/index.php/Talk:MANUAL_0_8
but can't figure it out.
Here's wht I have in jail.conf
[ssh-iptables]
<snip>
timeregex = S{3}s{1,2}d{1,2} d{2}:d{2}:d{2}
timepattern = %%b %%d %%H:%%M:%%S
failregex = pam_unix(sshd:auth): authentication failure
</snip>