Fix: use a safer regex

This commit is contained in:
Michele Bologna 2023-04-03 18:56:30 +00:00
parent aca76842af
commit f1e6f0ec21
No known key found for this signature in database

View file

@ -11,5 +11,5 @@
# Author: Michele Bologna https://www.michelebologna.net/
[Definition]
failregex = .*\[UFW BLOCK\] IN=.* SRC=<HOST>
failregex = ^\s*\S+ kernel:(?: +\[[^\]]+\])? \[UFW (?:LIMIT )?BLOCK\] (?:\b(?:IN=\w+|OUT=|(?:(?!OUT=|IN=)[A-Z]+=[^ \[]*)+) )*SRC=<ADDR> DST=\S+
ignoreregex =