mediamtx fail2ban filter

[adzmailru]

Question

Dear, Gurus!
Please help me!

I need to make fail2ban Log filter, part of "Regular expressions to match".

If you have, would you like to write it?

[aler9]

Hello, in order to write a fail2ban filter, you can start by enabling debug logging inside MediaMTX:

logLevel: debug

The log lines you're interested into are these ones:

2024/08/27 23:06:55 DEB [RTSP] [conn 127.0.0.1:44480] [s->c] RTSP/1.0 401 Unauthorized

Therefore:

regex=".* DEB \[RTSP\] \[conn <HOST>:[0-9]+\] \[s->c\] RTSP/1.0 401 Unauthorized"

Then test it:

log_line="2024/08/27 23:06:55 DEB [RTSP] [conn 127.0.0.1:44480] [s->c] RTSP/1.0 401 Unauthorized"
regex=".* DEB \[RTSP\] \[conn <HOST>:[0-9]+\] \[s->c\] RTSP/1\.0 401 Unauthorized"
fail2ban-regex "$log_line" "$regex"