Squirrelmail, Roundcube, et. al. login locally (::1 or 127.0.0.1). Don't think
you want to ban
those addresses. Search the Apache access log for the login failure screen and
key off
of that.
Bill
On 12/29/2019 11:12 AM, Tom Hendrikx wrote:
Hi,
Your fail regex does not extract an IP address or host from the log line, so
fail2ban will not know which host to ban.
try :
failregex = IMAP Error: Login failed for .* against localhost from <HOST>\.
Kind regards,
Tom
On 28-12-2019 15:48, Davide Perini wrote:
Hi all, guys.
Hope you are doing well on this holidays.
Is there someone who has fail2ban working on Centos 8 and roundcubemail?
My /var/log/roundcubemail/errors.log
looks like this
[28-Dec-2019 14:27:32 +0000]: <p2otg3ug> IMAP Error: Login failed for perini.davide against localhost from ::1. AUTHENTICATE
PLAIN: Authentication failed. in /usr/share/roundcubemail/program/lib/Roundcube/rcube_imap.php on line 200 (POST
/webmail/?_task=login&_action=login)
my roundcube.conf looks like this
[Definition]
failregex = (.*) IMAP Error: Login failed for .* from
ignoreregex =
What is the problem?
Any idea?
Thanks
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
