Dale, Mark wrote: > >I've had a look through the Mailman log files and can't see that Mailman >writes anywhere for failed login attempts (to the Admin page).
Correct. >It seems that the best that can be done at the moment is to guess it from the >POST entries in the Apache logs. > >Even there, a failed login just reloads the page and generates an Apache >'200' (Okay) entry for the request. Since Mailman 2.1.14, a login failure generates a 401. This should be enough for a fail2ban regexp to identify these failures. -- Mark Sapiro <[email protected]> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan ------------------------------------------------------ Mailman-Users mailing list [email protected] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
