Other tips for regexes. For single character alternatives suggest [Ll] instead of (L|l). Thanks for the improvement @Jamyn .

For dates you're on the right track. Just run the self tests to be sure you've got it right by running ./fail2ban-testcases.