fail2ban not working with Dovecot
Posted: Sat Oct 17, 2020 10:16 am
After updating CentOS7 with 'yum update' all jails are not banning, this is with Dovecot 2.2.36
Running
Gives
If I remove
From /etc/fail2ban/jail.local it all starts working again just without Dovecot failed login attempts getting banned, any ideas?
I originally got this working by following viewtopic.php?f=10&t=9040 however the update has changed something.
Running
Code: Select all
fail2ban-regex /var/log/dovecot.log /etc/fail2ban/filter.d/dovecot.conf
Code: Select all
Running tests
=============
Use failregex filter file : dovecot, basedir: /etc/fail2ban
Use datepattern : Default Detectors
ERROR: No failure-id group in '(?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.*'
[root@rainmail ~]#
Code: Select all
[dovecot-iptables]
enabled = true
filter = dovecot
action = vesta[name=MAIL]
logpath = /var/log/dovecot.log
maxretry = 5
bantime = 86400I originally got this working by following viewtopic.php?f=10&t=9040 however the update has changed something.