github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #579 from grooverdan/squirrelmail 

ENH: Squirrelmail filter
pull/580/head^2
Daniel Black 2014-01-13 02:19:34 -08:00
parent e73090d040 f2e55e8499
commit b60449e5c7
4 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ChangeLog
View File

@ -59,6 +59,7 @@ configuration before relying on it.
* Filter for stunnel * Filter for stunnel
* Filter for Counter Strike 1.6. Thanks to onorua for logs. * Filter for Counter Strike 1.6. Thanks to onorua for logs.
Close gh-347 Close gh-347
* Filter for squirrelmail. Close gh-261
- Enhancements - Enhancements
* Jail names increased to 26 characters and iptables prefix reduced * Jail names increased to 26 characters and iptables prefix reduced

13
config/filter.d/squirrelmail.conf Normal file
View File

@ -0,0 +1,13 @@
[Definition]
failregex = ^ \[LOGIN_ERROR\].*from <HOST>: Unknown user or password incorrect\.$
[Init]
datepattern = ^%%m/%%d/%%Y %%H:%%M:%%S
# DEV NOTES:
#
# Author: Daniel Black

6
config/jail.conf
View File

@ -640,6 +640,12 @@ port = imap3,imaps,pop3,pop3s
logpath = /var/log/maillog logpath = /var/log/maillog
[squirrelmail]
port = smtp,465,submission,imap2,imap3,imaps,pop3,pop3s,http,https,socks
logpath = /var/lib/squirrelmail/prefs/squirrelmail_access_log
[cyrus-imap] [cyrus-imap]
port = imap3,imaps port = imap3,imaps

3
fail2ban/tests/files/logs/squirrelmail Normal file
View File

@ -0,0 +1,3 @@
# failJSON: { "time": "2013-10-06T15:50:41", "match": true , "host": "151.64.44.11" }
10/06/2013 15:50:41 [LOGIN_ERROR] dadas (mydomain.org) from 151.64.44.11: Unknown user or password incorrect.