Yes, but surely its not a big leap for you to rewrite my regex to: auth\(default\): sql\(.*,<HOST>\): Password mismatch
Rob On Fri, 2007-12-21 at 16:30 +0100, Bjørn T Johansen wrote: > Yes, but that doesn't work for sql auth; as you see, the line logged is > different... > > BTJ > > On Fri, 21 Dec 2007 14:32:01 +0000 > Rob Coward <[EMAIL PROTECTED]> wrote: > > > I use pam authentication in dovecot and the following fail2ban filter > > seems to work fine for me: > > > > failregex = auth\(default\): pam\(.*,<HOST>\): pam_authenticate\(\) > > failed: > > > > Rob > > > > On Fri, 2007-12-21 at 12:04 +0100, Bj__rn T Johansen wrote: > > > > > On Thu, 20 Dec 2007 18:42:01 +0200 > > > Timo Sirainen <[EMAIL PROTECTED]> wrote: > > > > > > > On Thu, 2007-12-20 at 13:18 +0100, Bj__rn T Johansen wrote: > > > > > Yes, I know about those but I was kind of hoping to see failed > > > > > authentications in some logs without > > > > > enabling debug logging, like if I use PAM authentication.... > > > > > > > > auth_verbose=yes enables logging failed logins. > > > > > > > > > > That did the trick... thx... :) > > > > > > If I only had learned regexp like I have been meaning too for many years > > > now, this would have been a piece of > > > cake but... > > > > > > Does anyone use Dovecot together with fail2ban? If so, could any one > > > share the failregex they are using? (A) > > > (or perhaps someone could create a regexp that recognize a line like this: > > > > > > dovecot: Dec 21 11:58:07 Info: auth(default): sql([EMAIL > > > PROTECTED],85.19.143.23): Password mismatch > > > > > > ) > > > > > > > > > BTJ > > > > > > Please consider the environment before printing this email. > > > > > > GAME Stores Group Ltd has been awarded _Retailer of the Year_ at the 2006 > > Golden Joystick Awards and > > 'Thames Valley Business Award' for Outstanding Employer of Choice 2006. > > > > This e-mail and any files transmitted with it are confidential and intended > > solely for the use of the > > individual or entity to whom they are addressed. If you have received this > > e-mail in error please > > notify the system manager at: > > > > mailto:[EMAIL PROTECTED] > > > > The recipient acknowledges that the transmissions made via the Internet can > > be corrupted and therefore > > THE GAME GROUP PLC and any of its subsidiaries do not give any warranty as > > to the quality or accuracy of > > any information contained in the message or assume any liability for it or > > for its transmission, reception or > > storage. > > > > This footnote also confirms that this e-mail message has been swept by > > anti-virus software for the presence of > > computer viruses. > > http://www.game.co.uk > > http://www.gamegroup.plc.uk > > > > Registered Number: 1937170 > > Registered Office: Unity House, Telford Road, Basingstoke, Hampshire. RG21 > > 6YJ Registered in England and Wales. Please consider the environment before printing this email. GAME Stores Group Ltd has been awarded �Retailer of the Year� at the 2006 Golden Joystick Awards and 'Thames Valley Business Award' for Outstanding Employer of Choice 2006. This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this e-mail in error please notify the system manager at: mailto:[EMAIL PROTECTED] The recipient acknowledges that the transmissions made via the Internet can be corrupted and therefore THE GAME GROUP PLC and any of its subsidiaries do not give any warranty as to the quality or accuracy of any information contained in the message or assume any liability for it or for its transmission, reception or storage. This footnote also confirms that this e-mail message has been swept by anti-virus software for the presence of computer viruses. http://www.game.co.uk http://www.gamegroup.plc.uk Registered Number: 1937170 Registered Office: Unity House, Telford Road, Basingstoke, Hampshire. RG21 6YJ Registered in England and Wales.
