Fail2Ban

Discussion in 'Server Operation' started by Gerritdl, Nov 1, 2024.

  1. Gerritdl

    Gerritdl New Member

    Im having problems with the filter not recognising a line in my mail.log, have tried allot of options but the offending login still does not get recognised:
    folowing is the line in the mail.log file.
    postfix/smtpd[746975]: warning: unknown[194.169.175.10]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
    im using standard postfix.conf have also tried postfix-sasl.conf

    Im not a expert on the regex scripting, please help.
     
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Use tools to test regular expression, there are websites that offer such tools. Search Engines can find them.
    My signature has link to Fail2ban tutorial. Those authentication failed logins should be detected if you have enabled the postfix jail.
     
  3. Gerritdl

    Gerritdl New Member

    Hi Taleman
    I tested the filters with fail2ban-regex, just not able to fix it
     
  4. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Write
    Code:
    regex test online
    to a Search Engine and use those tools to debug the regex.
     
  5. Gerritdl

    Gerritdl New Member

    Thank you ill try that
     

Share This Page