Re: How to display ip address in syslog on linux?

2019-11-30 Thread Demetri A. Mkobaranov

On 11/30/19 6:56 PM, Reio Remma wrote:


I made a filter for myself to log failed auth attempts with IP to use 
in fail2ban.

do you mean a fail2ban filter?



Re: How to display ip address in syslog on linux?

2019-11-30 Thread Reio Remma

On 30.11.2019 18:50, Demetri A. Mkobaranov wrote:

Hello,

I'm trying to write a fail2ban filter for v.0.6.0.2 running on Debian 
10 but I don't see the ip address of the client displayed in syslog.


smtpctl log verbose doesn't help.

This is all I get:

Nov 30 16:48:29 dctl smtpd[9063]: 9ecee3c84e91538d smtp 
event=authentication user=i...@example.com result=permfail
Nov 30 16:48:30 dctl smtpd[9063]: smtp-in: Failed command on session 
9ecee3c84e91538d: "AUTH PLAIN (...)" => 535 Authentication failed


Is there any way to force smtpd to log the ip address of the client?


I made a filter for myself to log failed auth attempts with IP to use in 
fail2ban.


Good luck,
Reio



How to display ip address in syslog on linux?

2019-11-30 Thread Demetri A. Mkobaranov

Hello,

I'm trying to write a fail2ban filter for v.0.6.0.2 running on Debian 10 
but I don't see the ip address of the client displayed in syslog.


smtpctl log verbose doesn't help.

This is all I get:

Nov 30 16:48:29 dctl smtpd[9063]: 9ecee3c84e91538d smtp 
event=authentication user=i...@example.com result=permfail
Nov 30 16:48:30 dctl smtpd[9063]: smtp-in: Failed command on session 
9ecee3c84e91538d: "AUTH PLAIN (...)" => 535 Authentication failed


Is there any way to force smtpd to log the ip address of the client?

Thank you

Demetri