Update config/filter.d/dovecot.conf

added failregex line for debian and centos per 
http://www.fail2ban.org/wiki/index.php/Talk:Dovecot
pull/94/head
hamilton5 2012-12-10 19:17:04 -05:00
parent fc27e00290
commit 7ede1e8518
1 changed files with 1 additions and 0 deletions

View File

@ -15,6 +15,7 @@
# Values: TEXT
#
failregex = .*(?:pop3-login|imap-login):.*(?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.*
pam.*dovecot.*(?:authentication failure).*rhost=(?:::f{4,6}:)?(?P<host>\S*)
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.