Page 1 of 1

regex.pm file location and general lfd question

Posted: 24 Feb 2017, 20:08
by martexx
Hi,

im new to this forum but a long time user of csf. And since i use it i want to understand it a bit better.
Before i always used fail2ban next to csf because i dont know how to configure and especially where to see and confirm that csf is watching my logs.

So i thought it was needed to run fail2ban for per example imap logins.

People keep telling me that its not needed.

So that leaded me to search for how lfd deals with those log files and where the regexes are that control them, and i cant find them.

In regex.custom.pm i find this text:

Custom regex matching can be added to this file without it being overwritten
# by csf upgrades. The format is slightly different to regex.pm to cater for
# additional parameters


So ... where can i find tis regex.pm file? is that the file that deals with the default lfd setup?
On my server that file is present in /usr/local/lib/csf/version and /tmp/csf/version/version but contains smth i dont understand, it however does not look like regex.custom.pm at all!

So my question is, if not in regex.custom then where can i see how it works and which services and log files are dealth with? or have i a really big misconcepton on the whole thing?

Also i might have good news, at least for noobs like me concerning regex.. im having a tool built that takes a log file (pasted or from location) and converts that into regex.custom.pm format. It must be almost done now

Re: regex.pm file location and general lfd question

Posted: 24 Feb 2017, 20:21
by martexx
it seems the regex.pm file does exists in some versions, i see it in https://github.com/rlunar/Ajenti/blob/m ... f/regex.pm

Now that is not an offical release but Ajenti with csf.....

Downloaded the latets version today from configserver but there the file is not included