After update to NC17 fail2ban stopped working

After updating to Nextcloud 17, fail2ban stops working. Has something changed in the logfile? Does anyone have a working regex that works with Nextcloud 17.

Hi,

The log entries slightly changed and you need to modify your filter.
The new working filter is:

[Definition]
failregex= ^{"reqId":".*","level":2,"time":".*","remoteAddr":".*","app":".*".*","message":"Login failed: .* \(Remote IP: <HOST>\)".*}$

The filters are usually stored as *.conf files and can be found in /etc/fail2ban/filter.d/`

2 Likes

Thanks for the quick answer, works fine again :slight_smile: