[Dovecot] fail2ban

Aldo Reset aldo at placenet.org
Mon Aug 12 23:50:15 EEST 2013


hi

dovecot filter for fail2ban do not match:

dovecot: pop3-login: Aborted login (tried to use disallowed plaintext auth): user=<>, rip=67

dovecot filter:
failregex = (?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.*


bst regards.




More information about the dovecot mailing list