Your message dated Sat, 10 Dec 2016 17:34:49 +0000
with message-id <[email protected]>
and subject line Bug#847331: Removed package(s) from unstable
has caused the Debian Bug report #663726,
regarding squirrelmail-logger: The fail2ban config example does not correctly
reflect the default syslog format for this package.
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
663726: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663726
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: squirrelmail-logger
Version: 2.3-4
Severity: normal
I just attempted to setup fail2ban following the documentation in
/usr/share/doc/squirrelmail-logger/fail2ban and I ran into a few problems.
The failregex doesn't match the syslog output for failed logins. Syslog is the
default logging setup for squirrlemail-logger.
The section name in the jail.conf caused me to see some iptables errors because
"fail2ban-squirrelmail-iptables" is close to or over the limit of table name
length for iptables. The limit is 30 chars.
The logpath should be set to syslog since that is the default method.
The action method should be ommitted, the default action works just fine.
Ports need to be specified.
I think with the following changes the example will work better for those using
a default fail2ban setup.
Thank you for considering this change
Josh
==cut
--- fail2ban 2008-02-12 05:23:42.000000000 -0600
+++ fail2ban-fixed 2012-03-13 10:27:47.000000000 -0500
@@ -12,13 +12,12 @@
https, or use "iptables-multiport[port="http,https"]" if using both,
also be sure to set the correct log path and filename for your setup):
===============================================
-[squirrelmail-iptables]
+[squirrelmail]
enabled = true
filter = squirrelmail
-action = iptables[name=SquirrelMail, port=https, protocol=tcp]
- sendmail-whois[name=SquirrelMail, [email protected],
[email protected]]
-logpath = /var/lib/squirrelmail/prefs/squirrelmail.log
+port = http,https
+logpath = /var/log/syslog
maxretry = 5
bantime = 3600
===============================================
@@ -42,7 +41,7 @@
# (?:::f{4,6}:)?(?P<host>\S+)
# Values: TEXT
-failregex = \[LOGIN_ERROR\].*from <HOST>: Unknown user or password incorrect
+failregex = squirrelmail: Failed webmail login:.*at <HOST> on .*\(Unknown user
or password incorrect\.\)
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.
==endcut
-- System Information:
Debian Release: 6.0.4
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.24-2-pve (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Versions of packages squirrelmail-logger depends on:
ii squirrelmail 2:1.4.21-2 Webmail for nuts
ii squirrelmail-compatibility 2.0.16-1 SquirrelMail plugin: Let other plu
squirrelmail-logger recommends no packages.
squirrelmail-logger suggests no packages.
-- no debconf information
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--- End Message ---
--- Begin Message ---
Version: 2.3.1-1+rm
Dear submitter,
as the package squirrelmail-logger has just been removed from the Debian archive
unstable we hereby close the associated bug reports. We are sorry
that we couldn't deal with your issue properly.
For details on the removal, please see https://bugs.debian.org/847331
The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.
This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
[email protected].
Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)
--- End Message ---
