Hi again Sergio.
FYI
fail2ban unbans the IP after X minutes (X is set i the jail.conf either
globally or per 'filter.conf')
/Finn
On 02-03-2011 13:42, Sergio M wrote:
Finn Buhelt (kirstineslund) escribió:
Hi Sergio.
If I am reading Your logfile correct You should try to replace
*vchkpw-pop3: vpopmail user not found* with *vchkpw-smtp: password
fail *and leave everything else.
Change this in the filter.d directory and remember to reload fail2ban
( "fail2ban-client reload" on the CLI)
Regards,
Finn
This one got lots of hits in the regex text:
# cat /etc/fail2ban/filter.d/vpopmail-fail.conf
[Definition]
failregex = vchkpw-smtp: password fail ([^)]*) [^@]*@[^:]*:<HOST>
ignoreregex =
(i took it from the spanish site I posted before)
I could also use some other set of rules for qmail. The default one
does not get any hits.
About fail2ban>
1. Everytime I reload it I loose the whole set of banned IPs? Same
with rebooting? Can I make them persist?
2. How can I unban a single IP without restarting fail2ban?
Thanks!
-Sergio
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and
installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and
packages.
To unsubscribe, e-mail:
[email protected]
For additional commands, e-mail:
[email protected]
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
