I use pam authentication in dovecot and the following fail2ban filter
seems to work fine for me:
failregex = auth\(default\): pam\(.*,<HOST>\): pam_authenticate\(\)
failed:
Rob
On Fri, 2007-12-21 at 12:04 +0100, Bjørn T Johansen wrote:
> On Thu, 20 Dec 2007 18:42:01 +0200
> Timo Sirainen <[EMAIL PROTECTED]> wrote:
>
> > On Thu, 2007-12-20 at 13:18 +0100, Bjørn T Johansen wrote:
> > > Yes, I know about those but I was kind of hoping to see failed
> > > authentications in some logs without enabling debug logging,
> > > like if I use PAM authentication....
> >
> > auth_verbose=yes enables logging failed logins.
> >
>
> That did the trick... thx... :)
>
> If I only had learned regexp like I have been meaning too for many years now,
> this would have been a piece of cake but...
>
> Does anyone use Dovecot together with fail2ban? If so, could any one share
> the failregex they are using? (A)
> (or perhaps someone could create a regexp that recognize a line like this:
>
> dovecot: Dec 21 11:58:07 Info: auth(default): sql([EMAIL
> PROTECTED],85.19.143.23): Password mismatch
>
> )
>
>
> BTJ
Please consider the environment before printing this email.
GAME Stores Group Ltd has been awarded �Retailer of the Year� at the 2006
Golden Joystick Awards and
'Thames Valley Business Award' for Outstanding Employer of Choice 2006.
This e-mail and any files transmitted with it are confidential and intended
solely for the use of the
individual or entity to whom they are addressed. If you have received this
e-mail in error please
notify the system manager at:
mailto:[EMAIL PROTECTED]
The recipient acknowledges that the transmissions made via the Internet can be
corrupted and therefore
THE GAME GROUP PLC and any of its subsidiaries do not give any warranty as to
the quality or accuracy of
any information contained in the message or assume any liability for it or for
its transmission, reception or storage.
This footnote also confirms that this e-mail message has been swept by
anti-virus software for the presence of computer viruses.
http://www.game.co.uk
http://www.gamegroup.plc.uk
Registered Number: 1937170
Registered Office: Unity House, Telford Road, Basingstoke, Hampshire. RG21 6YJ
Registered in England and Wales.
