Results 1 to 2 of 2

Thread: squirrelmail & fail2ban

  1. #1
    Join Date
    Nov 2008
    Location
    Sheffield, UK
    Beans
    1,517
    Distro
    Ubuntu

    squirrelmail & fail2ban

    Can someone help with expressions?

    I get this in syslog

    Code:
    Apr 24 15:40:48 servername squirrelmail: Failed webmail login: by N/A (domain.com) at 86.0.0.0 on 04/24/2013 14:40:48: Unknown user or password incorrect.

    It looks like the docs are outdated as it says filter should look like

    Code:
    failregex = \[webmail\].*at <HOST>: Unknown user or password incorrect
    But that does nothing

  2. #2
    Join Date
    Nov 2008
    Location
    Sheffield, UK
    Beans
    1,517
    Distro
    Ubuntu

    Re: squirrelmail & fail2ban

    for anyone else that needs it it's


    Code:
    failregex = squirrelmail: Failed webmail login: by .* \(.*\) at <HOST> on .* Unknown user or password incorrect.$

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •