Re: [Fail2ban-users] A regular expression for a NOT condition

2023-03-22 Thread James Moe via Fail2ban-users
On 2023-03-22 14:03, Nick Howitt via Fail2ban-users wrote: > Use an "ignoreregex = 127\.0\.0\.1" line. > That works! Thank you. -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. ___ Fail2ban-users mailing list Fail2ban-users@lis

Re: [Fail2ban-users] A regular expression for a NOT condition

2023-03-22 Thread Nick Howitt via Fail2ban-users
Use an "ignoreregex = 127\.0\.0\.1" line. Or just set an ignoreip of 127.0.0.1. On 22/03/2023 19:22, James Moe via Fail2ban-users wrote: We scan our mail logs for the use of "auth LOGIN". No legit user uses LOGIN; it is always a dictionary attack. We also have a SPAM proxy (ASSP) that filters

[Fail2ban-users] A regular expression for a NOT condition

2023-03-22 Thread James Moe via Fail2ban-users
We scan our mail logs for the use of "auth LOGIN". No legit user uses LOGIN; it is always a dictionary attack. We also have a SPAM proxy (ASSP) that filters incoming mail before sending a connection to the mail server; the connections are for ports 25 and 587. The mail server logs these connecti