[Fail2ban-users] dovecot and postfix jail with extra SSL logging

2018-03-06 Thread Sophie Loewenthal
Morning, My logging from and postfix dovecot is in this format: Mar 6 07:49:45 mx dovecot: imap-login: Login: sop...@example.com>, method=PLAIN, rip=94.19.2.3, lip=1.31.1.3, mpid=10655, TLS, TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Mar 6 07:55:36 mx postfix/smtpd[10793

Re: [Fail2ban-users] dovecot and postfix jail with extra SSL logging

2018-03-06 Thread Tom Hendrikx
On 06-03-18 08:59, Sophie Loewenthal wrote: > Morning, > > My logging from and postfix dovecot is in this format: > > Mar 6 07:49:45 mx dovecot: imap-login: Login: sop...@example.com>, > method=PLAIN, rip=94.19.2.3, lip=1.31.1.3, mpid=10655, TLS, TLSv1.2 with > cipher ECDHE-RSA-AES256-GCM-S

Re: [Fail2ban-users] How to flush log and database?

2018-03-06 Thread Bill Shirley
You must have missed the discussion back in December about cleaning up the sqlite3 database: https://sourceforge.net/p/fail2ban/mailman/message/36158578/ The short version.  Trim the sqlite3 database to only the last 90 days: - File /etc/fail2ban/fail2ban.prune.sqlite.commands: delete from

Re: [Fail2ban-users] Explanation of fail2ban loglevel's?

2018-03-06 Thread Graham
Hello John, You may find that "man syslog" or "man logger" gives the meanings of the levels, which I think tend to be consistent amongst many logging processes. You've not told us which log file (or files) grew large, or over what period, or how much network activity there is a