Just a small contribution Wiki has something wrong instead of: failregex = vchkpw-smtp: vpopmail user not found .*:<HOST>
it should be failregex = vchkpw-pop3: vpopmail user not found .*:<HOST> On 3 August 2011 06:16, Pak Ogah <[email protected]> wrote: > On 08/02/11 12:54, nishant amin wrote: > >> hi all >> i am attaching my jail.conf and pop.conf for qmail pop3 (this is >> working for me) >> may be you can edit it to your needs >> >> [root@mail ~]# cat /etc/fail2ban/jail.conf >> >> >> [pop3] >> enabled = true >> filter = pop3 >> action = iptables[name=pop3, port=110, protocol=tcp] >> logpath = /var/log/maillog >> maxretry = 3 >> bantime = 86400 >> findtime = 3600 >> ignoreip = 127.0.0.1 (you can put any other ip you want hear) >> backend = auto >> >> >> >> root@mail ~]# cat /etc/fail2ban/filter.d/pop3.**conf >> >> [Definition] >> #Looks for failed password logins to SMTP >> failregex = vchkpw-pop3: password fail ([^)]*) [^@]*@[^:]*:<HOST> >> ignoreregex = >> >> >> >> regards >> NIshant Amin >> >> >> Hi Nishant, > does your rule the same with the one on > http://wiki.qmailtoaster.com/**index.php/Fail2Ban<http://wiki.qmailtoaster.com/index.php/Fail2Ban> > > if not, then can please add to wiki. > and if possible other fail2ban rules that you used to protect your qmt box. > > I am thinking fail2ban and rules-related to qmt should be in qmt stock. > what do you think? > > > ------------------------------**------------------------------** > --------------------- > Qmailtoaster is sponsored by Vickers Consulting Group ( > www.vickersconsulting.com) > Vickers Consulting Group offers Qmailtoaster support and installations. > If you need professional help with your setup, contact them today! > ------------------------------**------------------------------** > --------------------- > Please visit qmailtoaster.com for the latest news, updates, and > packages. > To unsubscribe, e-mail: qmailtoaster-list-unsubscribe@** > qmailtoaster.com <[email protected]> > For additional commands, e-mail: qmailtoaster-list-help@** > qmailtoaster.com <[email protected]> > > >
