Also, I've noticed the default jail actually has a line:
port   = imap3,imaps
so it is not even protecting the standard imap port (143). Perhaps the line should read:

port   = imap,imap3,imaps,pop3,pop3s
Nick

On 07/11/2018 09:41, Nick Howitt wrote:
I've just noticed there may be a bug in the cyrus-imap jail. Cyrus-imap provides both POP and IMAP services and the filter defects, pop, pops, imap and imaps bad logins, however, once detected, the jail only then blocks the imap and imaps ports and not the pop/pops ports.

In the jail, should the line:
port   = imap,imaps
read
port   = imap,imaps,pop3,pop3s

Regards,

Nick




_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users



_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to