fail2ban 正则问题，

[shenfeng_C]

我想匹配nginx日志中403的请求 ，代码如下

failregex = ^<HOST> -.*"(GET|POST).*.php.*\ 403\ .*$
ignoreregex =

但是测试匹配结果如下


Failregex: 32 total
|- #) [# of hits] regular expression
| 1) [32] ^<HOST> -.*"(GET|POST).*.php.*\ 403\ .*$
`-

Ignoreregex: 0 total

Date template hits:
|- [# of hits] date format
| [3266] Day/MONTH/Year:Hour:Minute:Second
`-

Lines: 3266 lines, 0 ignored, 32 matched, 3234 missed
Missed line(s): too many to print. Use --print-all-missed to print all 3234 lines

貌似匹配成功了，但是不打印结果，估计匹配的不对，求教大家怎么写这个正则，

我的日志格式如下

220.181.51.39 - - [08/Sep/2014:17:07:34 -0400] "GET /index.php HTTP/1.1" 404 576 "http://www.baidu.com" "Mozilla/4.0" 204.44.65.173
222.66.115.229 - - [08/Sep/2014:17:07:35 -0400] "GET / HTTP/1.1" 404 567 "http://www.baidu.com" "Mozilla/4.0" 127.0.0.1
218.90.174.167 - - [08/Sep/2014:17:07:35 -0400] "GET / HTTP/1.1" 404 567 "http://www.baidu.com" "Mozilla/4.0" 50.117.86.72