2013-10-30 13:02:59 +00:00
|
|
|
# Fail2Ban filter for uwimap
|
2013-09-29 08:06:27 +00:00
|
|
|
#
|
2013-10-30 13:02:59 +00:00
|
|
|
|
2013-09-29 08:06:27 +00:00
|
|
|
[INCLUDES]
|
|
|
|
|
|
|
|
|
|
before = common.conf
|
|
|
|
|
|
|
|
|
|
[Definition]
|
|
|
|
|
|
|
|
|
|
_daemon = (?:ipop3d|imapd)
|
|
|
|
|
|
2013-10-01 12:10:33 +00:00
|
|
|
failregex = ^%(__prefix_line)sLogin (?:failed|excessive login failures|disabled|SYSTEM BREAK-IN ATTEMPT) user=\S* auth=\S* host=.*\[<HOST>\]\s*$
|
2013-10-01 12:32:57 +00:00
|
|
|
^%(__prefix_line)sFailed .* override of user=.* host=.*\[<HOST>\]\s*$
|
2013-09-29 08:06:27 +00:00
|
|
|
|
|
|
|
|
ignoreregex =
|
2013-10-30 13:02:59 +00:00
|
|
|
|
|
|
|
|
# Author: Amir Caspi
|
