I've got a LogRE set for warning: SMTP authentication failed That way I get an email when SMTP auth fails. The Log itself shows the offender's IP address, but not the attempted username.
The email notification shows neither the IP address or the username. Would it be possible to have Log RE email the full line in the log which includes the IP address? In the log it shows like this: Jul-18-15 12:54:42 y.y.y.y warning: SMTP authentication failed on x.x.x.x y.y.y.y is the offender's ip. x.x.x.x is out internal SMTP ip. The email just shows warning: SMTP authentication failed on x.x.x.x And is there a way that you could add the offender's username in the log so we can tell what account is trying to be hacked more easily? Thanks ------------------------------------------------------------------------------ _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
