On 30.11.2019 18:50, Demetri A. Mkobaranov wrote:

I'm trying to write a fail2ban filter for v. running on Debian 10 but I don't see the ip address of the client displayed in syslog.

smtpctl log verbose doesn't help.

This is all I get:

Nov 30 16:48:29 dctl smtpd[9063]: 9ecee3c84e91538d smtp event=authentication user=i...@example.com result=permfail Nov 30 16:48:30 dctl smtpd[9063]: smtp-in: Failed command on session 9ecee3c84e91538d: "AUTH PLAIN (...)" => 535 Authentication failed

Is there any way to force smtpd to log the ip address of the client?

I made a filter for myself to log failed auth attempts with IP to use in fail2ban.

Good luck,

Reply via email to