This is on 0.8, slackware 15.0
I had problems with 0.9, even on centos, so stuck with 0.8
[Definition]
failregex = ^(?: auth-worker.*\)).* sql\(.*,<HOST>\): unknown user
^(?: auth-worker.*\)).* sql\(.*,<HOST>,.*\): unknown user .*$
^(?: auth-worker.*\)).* sql\(.*,<HOST>,.*\): Password mismatch .*$
^(?: imap-login|pop3-login): .*(?:Disconnected|Authentication
failure|Aborted login \(auth failed|Aborted login \(tried to use
disabled|Disconnected \(auth failed).*rip=<HOST>,.*$
^(?: imap-login|pop3-login): .*(?:Disconnected|Aborted login \(auth
failed|Aborted login \(tried to use disabled|Disconnected \(auth
failed).*rip=<HOST>$
On 25/01/2023 21:05, Robby Pedrica wrote:
Hi all,
I'd appreciate some help with a regex on dovecot that I can't seem to
get right. Config is ...
patform: slackware 15 64bit
fail2ban: v0.9.4
dovecot.conf:
--
Regards,
Noel Butler
This Email, including attachments, may contain legally privileged
information, therefore at all times remains confidential and subject to
copyright protected under international law. You may not disseminate
this message without the authors express written authority to do so.
If you are not the intended recipient, please notify the sender then
delete all copies of this message including attachments immediately.
Confidentiality, copyright, and legal privilege are not waived or lost
by reason of the mistaken delivery of this message._______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
