我對 postgresql 使用這個過濾器：
[Definition]
failregex = ^<HOST>.+FATAL: password authentication failed for user.+$
^<HOST>.+FATAL: no pg_hba.conf entry for host .+$
ignoreregex = duration:#
在我的監獄文件中，我有以下配置：
[postgresql]
enabled = true
port = 5432
protocol = tcp
filter = custom-postgresql
logpath = /var/log/postgresql/postgresql-12-main.log
maxretry = 3
在我的 postgresql.conf 中，我更改了日誌資訊：
log_line_prefix = '%h %m [%p] %q%u@%d '
但是當我嘗試使用failban 對其進行測試時，我收到以下錯誤：
root@server:/etc/fail2ban# fail2ban-regex /etc/fail2ban/filter.d/custom-postgresql.conf /var/log/postgresql/postgresql-12-main.log
Running tests
=============
Use failregex file : /var/log/postgresql/postgresql-12-main.log
Wrong config file: File contains no section headers.
file: '/var/log/postgresql/postgresql-12-main.log', line: 1
'2020-08-30 01:19:48.411 CEST [28837] [unknown]@[unknown] FATAL: unsupported frontend protocol 0.0: server supports 2.0 to 3.0\n'
ERROR: failed to load filter /var/log/postgresql/postgresql-12-main.log
我這裡的錯誤是什麼？我錯過了什麼？
難道是postgresql的錯誤？因為在日誌中我看到了這一點：
2020-08-30 01:19:48.411 CEST [28837] [unknown]@[unknown] FATAL: unsupported frontend protocol 0.0: server supports 2.0 to 3.0
2020-08-30 01:19:48.619 CEST [28838] [unknown]@[unknown] FATAL: unsupported frontend protocol 255.255: server supports 2.0 to 3.0
2020-08-30 01:19:48.828 CEST [28839] [unknown]@[unknown] FATAL: no PostgreSQL user name specified in startup packet
2020-08-30 02:20:12.462 CEST [29766] [unknown]@[unknown] FATAL: unsupported frontend protocol 65363.19778: server supports 2.0 to 3.0
2020-08-30 03:16:01.172 CEST [31372] [unknown]@[unknown] LOG: invalid length of startup packet
2020-08-30 03:16:01.189 CEST [31373] [unknown]@[unknown] LOG: invalid length of startup packet
2020-08-30 03:16:01.205 CEST [31374] [unknown]@[unknown] FATAL: unsupported frontend protocol 65363.19778: server supports 2.0 to 3.0
答案1
您提供的參數順序錯誤。
從man fail2ban-regex：
fail2ban-regex [OPTIONS] <LOG> <REGEX> [IGNOREREGEX]
您必須先提供日誌文件，然後提供配置文件，反之亦然。
答案2
[Definition]
failregex = ^<HOST>.*FATAL:\s\spassword authentication failed for user
^<HOST>.*FATAL:\s\sno pg_hba.conf entry for host
ignoreregex =