HI, now I'm testing fail2ban and for vsftpd is working but for dropbear not.
I starting dropbear with:
dropbear -E 2> /opt/val/log/dropbear.log and dropbear log is now runing but fai2ban isn't runing witch this log.
and i think that failregex in filter.d/sshd.conf is wrong for my log.
How can have to change this failregex??
thanks a lot
Is that really your dropbear start command??? If so you have a typo. You have put in the path opt/val/log in the dropbear start command and have fail2ban looking in opt/var/log. Dunno off hand beyond that (hopefully it's that simple).