Re: [SOGo] Sogo + Fail2ban

2015-06-04 Thread Kamaldeep Singh
In-line:- On Thursday 04 June 2015 06:50 PM, Christian M. Jensen wrote: hi. have you looked at https://lists.inverse.ca/sogo/arc/users/2013-02/msg00097.html i used that on my server with success in the past I have tried that but no luck. I am using LDAP for sogo authentication. May be that's wh

Re: [SOGo] Sogo + Fail2ban

2015-06-04 Thread Christian M. Jensen
hi. have you looked at https://lists.inverse.ca/sogo/arc/users/2013-02/msg00097.html i used that on my server with success in the past Regards Christian Jensen On 04-06-2015 13:48, Kamaldeep Singh wrote: Hi All, I was trying to set up the fail2ban on centos 6 for our SOGO server. I have enab

[SOGo] Sogo + Fail2ban

2015-06-04 Thread Kamaldeep Singh
Hi All, I was trying to set up the fail2ban on centos 6 for our SOGO server. I have enabled the rule in jail.local file. But it does not block any ip if anyone attempt to login with wrong password. Can you help me in that? Below is the entry of jail.local and filter file. *-- jail.local* ==

Re: [SOGo] SOGo + fail2ban

2013-08-23 Thread Ben
On 8/23/2013 6:42 AM, Jean Raby wrote: On 13-08-23 8:39 AM, Jean Raby wrote: On 13-08-22 11:46 AM, Ben wrote: proxy_set_header x-webobjects-remote-host 127.0.0.1; That is not good. remove that line and sogo will happily show you the remote host :-) In fact, you can

Re: [SOGo] SOGo + fail2ban

2013-08-23 Thread Jean Raby
On 13-08-23 8:39 AM, Jean Raby wrote: On 13-08-22 11:46 AM, Ben wrote: proxy_set_header x-webobjects-remote-host127.0.0.1; That is not good. remove that line and sogo will happily show you the remote host :-) In fact, you can either leave it out entirely and sogo wil

Re: [SOGo] SOGo + fail2ban

2013-08-23 Thread Jean Raby
On 13-08-22 11:46 AM, Ben wrote: proxy_set_header x-webobjects-remote-host127.0.0.1; That is not good. remove that line and sogo will happily show you the remote host :-) -- users@sogo.nu https://inverse.ca/sogo/lists

Re: [SOGo] SOGo + fail2ban

2013-08-23 Thread Ben
Can you post your apache config and a sample http request from a client going to sogo on 127.0.0.1:2 ? I'm using nginx, not apache, but the config is: location /SOGo { if ($scheme = 'http') { #Insecure, lets go to https rewrite ^

Re: [SOGo] SOGo + fail2ban

2013-08-22 Thread Jean Raby
On 13-08-22 12:49 AM, Ben wrote: Aug 21 22:40:04 sogod [13156]: SOGoRootPage Login from '127.0.0.1' for user 'asdf' might not have worked - password policy: 65535 grace: -1 expire: -1 bound: 0 Can you post your apache config and a sample http request from a client going to sogo on 127.0.0.1:2

[SOGo] SOGo + fail2ban

2013-08-22 Thread Ben
I'm having a problem getting fail2ban working with SOGo. (2.0.7 on debian wheezy) There was a thread about this a while ago saying that 2.0.5 had fixed some logging of sogo for fail2ban to work -- I'm using 2.0.7. so I think this is a different issue. When I use the webmail interface to SOGo