ConfigServer Community Forum

Thank you chirpy ! Could you please have a look at the regex i added (stolen from your vsftpd line in regex.pm)? if (($config{LF_FTPD}) and ($lgfile eq $config{FTPD_LOG}) and ($line =~ /^\w+ \d{2} \d{2}:\d{2}:\d{2} (\S+) vsftpd: pam_unix\(vsftpd:auth\): authentication failure; logname=\S*\s+\S+\s+\S...

It seems this problem hasn't got fixed. I have enabled FTP login failure detection but LFD still doesn't block them: root@lamnk:/var/log# grep vsftpd /var/log/secure Sep 23 07:16:13 lamnk vsftpd: pam_unix(vsftpd:auth): check pass; user unknown Sep 23 07:16:13 lamnk vsftpd: pam_unix(vsftpd:auth): aut...