Filter syslog

[gabrielbadea]

Hello,

I have the following problem,

I have a filter for fail2ban that bans me when the message appears: PTY read or GRE write failed", the problem is that this message also appears when the user wants to connect and the internet fails.

I want to filter if it is possible for syslog to show this error only when the message "Peer failed CHAP authentication" also appears, this message only appears when the password is wrong.

The log is saved in /var/log/syslog

Any answer is welcome.

Thank you!

 

[gabrielbadea]

Sorry, I forgot to specify, I have debian 11.3

If you need other details, please let me know.