Re: [RCU] Fail2ban and roundcube on CentOS 8

2019-12-28 Thread @lbutlr
On 28 Dec 2019, at 08:32, SM Hosting.sk wrote: > failregex = (.*) IMAP Error: Login failed for .* from Since the failure is from ::1 that is just going to hit localhost and fail2ban isn’t dumb enough to bad localhost. If the from is not being logged properly, you cannot ban it. -- Ninjas d

Re: [RCU] Fail2ban and roundcube on CentOS 8

2019-12-28 Thread SM Hosting.sk
Hi, you are missing in the rule failregex = (.*) IMAP Error: Login failed for .* from Or give this a try: [INCLUDES] before = common.conf [Definition] prefregex = ^\s*(\[\])?(%(__hostname)s\s*(?:roundcube(?:\[(\d*)\])?:)?\s*(<[\w]+>)? IMAP Error)?: .+$ failregex = ^(?:FAILED login|Logi

[RCU] Fail2ban and roundcube on CentOS 8

2019-12-28 Thread Davide Perini
Hi all, guys. Hope you are doing well on this holidays. Is there someone who has fail2ban working on Centos 8 and roundcubemail? My /var/log/roundcubemail/errors.log looks like this [28-Dec-2019 14:27:32 +]: IMAP Error: Login failed for perini.davide against localhost from ::1. AUTHENTICAT