Incompatibility list (compared to v.0.9):
failregex) internal capture-groups:
If you've your own
failregex or custom filters using conditional match
(?P=host), you should rewrite the regex like in example below resp. using
(?:(?P=ip4)|(?P=ip6) instead of
(?:(?P=ip4)|(?P=ip6)|(?P=dns)) corresponding your
Of course you can always define your own capture-group (like below
_cond_ip_) to do this.
testln="1500000000 failure from 192.0.2.1: bad host 192.0.2.1"
fail2ban-regex "$testln" "^\s*failure from (?P<_cond_ip_><HOST>): bad host (?P=_cond_ip_)$"
- New internal groups (currently reserved for internal usage):
user and another captures in lower case if mapping from tag
<F-*> used in failregex (e. g.
v.0.10 uses more precise date template handling, that can be theoretically incompatible to some user configurations resp.
Since v0.10 fail2ban supports the matching of IPv6 addresses, but not all ban actions are IPv6-capable now.
Please login to add feedback.