Re: [Dovecot] fail2ban

2013-10-05 Thread Oscar del Rio
On 04/10/2013 1:47 AM, Nick Edwards wrote: filter.d/dovecot.conf [Definition] failregex = (?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?Phost\S*),.* ignoreregex = The following is

Re: [Dovecot] fail2ban

2013-10-05 Thread Nick Edwards
Thanks I have already fixed this as with my reply to Noel, his suggestion works and, as with like your example which is same as Noels first, and as he correctly it seems mentions with my tests with fail2ban-regex, it only sees TLS, the deadbeats trying to brute force me, never seem to use that,

Re: [Dovecot] fail2ban

2013-10-05 Thread Nick Edwards
Bingo! Thanks, working now On 10/5/13, Noel Butler noel.but...@ausics.net wrote: On Fri, 2013-10-04 at 15:47 +1000, Nick Edwards wrote: For dovecot 2.1 as per wiki2, is this still valid? noticed a problem before and saw it does seem to be triggering, I use: looks out dated

[Dovecot] couple of errors on new setup

2013-10-05 Thread Dean Guenther
I have stood up a new test mail server as an upgraded version of my existing mail server. I have been fairly consistently getting two types of error messages. I'm thinking they may be related permissions issues, but I can't figure out what their problem is. Oct 4 12:45:47 digory dovecot: