Page 1 of 1

LF_BIND trigger not working.

Posted: 17 Apr 2021, 09:43
by marcele
In my testing I wasn't able to get the LF_BIND login failure trigger to work. After checking some Centos7 and Centos 8 servers it looks like the BIND trigger in RegexMain.pm doesn't account for the hex value e.g. (@0x7f18041004f0) that is logged in Bind 9+ servers.

Broken (Currently used):
https://regex101.com/r/6y7q44/1

Fixed (I just added the (?: \S+)? to add a non-capturing group that is optional):
https://regex101.com/r/dAn2DK/1

I hope this helps!