Hi, could someone please provide me with a working config for dovecot-pop3imap? It seems the regex provided in the dovecot wiki does not work any more in 0.10.2:
# fail2ban-regex /var/log/mail.log /etc/fail2ban/filter.d/dovecot-pop3imap.conf Running tests ============= Use failregex filter file : dovecot-pop3imap, basedir: /etc/fail2ban ERROR: No failure-id group in '(?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.*' Also, I'm not sure what the regex failregex = dovecot.*auth\(default\): pam\(.*,<HOST>\): pam_authenticate\(\) failed: from https://www.fail2ban.org/wiki/index.php/Dovecot is supposed to be doing... but it's not matching anything. Br, Alex
pgpYPwYttgah6.pgp
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
