fail2ban/filter.d/uwimap-auth.conf
Arija A. 7138c7cf7c
init
Signed-off-by: Arija A. <ari@ari.lt>
2025-12-02 21:00:07 +02:00

17 lines
374 B
Text

# Fail2Ban filter for uwimap
#
[INCLUDES]
before = common.conf
[Definition]
_daemon = (?:ipop3d|imapd)
failregex = ^%(__prefix_line)sLogin (?:failed|excessive login failures|disabled|SYSTEM BREAK-IN ATTEMPT) user=\S* auth=\S* host=.*\[<HOST>\]\s*$
^%(__prefix_line)sFailed .* override of user=.* host=.*\[<HOST>\]\s*$
ignoreregex =
# Author: Amir Caspi