Update config/filter.d/dovecot.conf

even tho not on the fail2ban site..
suggested to not be greedy by yarikoptic
pull/94/head
hamilton5 2012-12-11 12:09:28 -05:00
parent e040c6d8a3
commit 266cdc29a6
1 changed files with 1 additions and 1 deletions

View File

@ -15,7 +15,7 @@
# Values: TEXT
#
failregex = .*(?:pop3-login|imap-login):.*(?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.*
pam.*dovecot.*(?:authentication failure).*rhost=<HOST>
pam.*dovecot.*(?:authentication failure).*rhost=<HOST>(?:\s+user=.*)?\s*$
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.