Re: How to display ip address in syslog on linux?
On 01.12.2019 1:46, Demetri A. Mkobaranov wrote: On 11/30/19 6:56 PM, Reio Remma wrote: I made a filter for myself to log failed auth attempts with IP to use in fail2ban. do you mean a fail2ban filter? It's a reporter filter in OpenSMTPD that gathers IP addresses for failed auth and then writes them to maillog: Nov 27 01:02:26 host smtpd[29787]: auth-reporter: failed authentication from user=username address=113.172.130.229 host=static.vnpt.vn Fail2ban takes it from there.
Re: How to display ip address in syslog on linux?
On 11/30/19 6:56 PM, Reio Remma wrote: I made a filter for myself to log failed auth attempts with IP to use in fail2ban. do you mean a fail2ban filter?
Re: How to display ip address in syslog on linux?
On 30.11.2019 18:50, Demetri A. Mkobaranov wrote: Hello, I'm trying to write a fail2ban filter for v.0.6.0.2 running on Debian 10 but I don't see the ip address of the client displayed in syslog. smtpctl log verbose doesn't help. This is all I get: Nov 30 16:48:29 dctl smtpd[9063]: 9ecee3c84e91538d smtp event=authentication user=i...@example.com result=permfail Nov 30 16:48:30 dctl smtpd[9063]: smtp-in: Failed command on session 9ecee3c84e91538d: "AUTH PLAIN (...)" => 535 Authentication failed Is there any way to force smtpd to log the ip address of the client? I made a filter for myself to log failed auth attempts with IP to use in fail2ban. Good luck, Reio