Emanuel.
Your regex should look like below: failregex = ^.*\[<HOST>\].*Incorrect authentication data.* or failregex = ^.*fixed_login authenticator failed.*\[<HOST>\].* Best regards. Tom On 17/01/18 18:10, Bill Shirley wrote:
an 17 11:38:59 linux.backend exim[21870]: 2018-01-17 11:38:56 fixed_login authenticator failed for (User) [190.98.45.180]: 535 Incorrect authentication data (set_id=s...@dattaweb.com)In the file maillog-custom.conf failregex = \[<HOST>\]:\d+: 535 Incorrect authentication data
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
