On 02/13/2015 01:42 AM, Davide Perini wrote: > Hi, > I'm trying to use fail2ban with roundcube, using fail2ban 0.9.1 under > CentOS 7. > > This is my regex in roundcube.conf > failregex = \[LOGIN_ERROR\].*from <HOST>: Unknown user or password > incorrect > > This is a entry that shows how roundcube writes on the log file > 07/24/2011 13:08:33 [LOGIN_ERROR] N/A (domainname.org) from > xxx.xxx.xxx.xxx: Unknown user or password incorrect. > > where xxx.xxx.xxx.xxx is an ip address > > The jail is active, max retry 3, I can have dozens of this entry but no > one is banned. > > Can you help please?
I suspect the problem is that we've made the journal backend the default and there is no journalmatch entry. Try removing the fail2ban-systemd package to set the backend back to auto. -- Orion Poplawski Technical Manager 303-415-9701 x222 NWRA/CoRA Division FAX: 303-415-9702 3380 Mitchell Lane [email protected] Boulder, CO 80301 http://www.cora.nwra.com ------------------------------------------------------------------------------ Dive into the World of Parallel Programming. The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/ _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
