search for: pop3imap

I'm trying to setup and test fail2ban with dovecot I've installed fail2ban, I've copied config from https://wiki2.dovecot.org/HowTo/Fail2Ban, and, trying to test it, attempted multiple mail access with wrong password, but, get this: # fail2ban-client status dovecot-pop3imap Status for the jail: dovecot-pop3imap |- Filter | |- Currently failed: 0 | |- Total failed: 0 | `- File list: /var/log/dovecot.log `- Actions |- Currently banned: 0 |- Total banned: 0 `- Banned IP list: # grep 'auth fail' /var/log/dovecot.log | grep voytek at k |...

Copy dovecot-pop3imap.conf to dovecot-pop3imap.local.? Edit dovecot-pop3imap.local and add to the failregex: dovecot:.+auth failed.+rip=<HOST> Then run: fail2ban-regex /var/log/dovecot.log /etc/fail2ban/filter.d/dovecot-pop3imap.local and see if you get any matches. Bill On 12/16/2017 6:56 PM, voytek at sbt.net...

...saw them listed on 'status;, but, couldn't find them in /etc/hosts.deny, not sure if they meant to be there. [and, the device, after failing smtp, could still access http, so not sure if my testing is valid] # fail2ban-client status Status |- Number of jail: 2 `- Jail list: dovecot-pop3imap, postfx-sasl # fail2ban-client status postfx-sasl Status for the jail: postfx-sasl |- Filter | |- Currently failed: 0 | |- Total failed: 57 | `- File list: /var/log/maillog `- Actions |- Currently banned: 1 |- Total banned: 7 `- Banned IP list: 201.249.46.118 # fail2...

...o setup and test fail2ban with dovecot > > I've installed fail2ban, I've copied config from > https://wiki2.dovecot.org/HowTo/Fail2Ban, and, trying to test it, > > attempted multiple mail access with wrong password, but, get this: > > # fail2ban-client status dovecot-pop3imap > Status for the jail: dovecot-pop3imap > |- Filter > | |- Currently failed: 0 > | |- Total failed: 0 > | `- File list: /var/log/dovecot.log > `- Actions > |- Currently banned: 0 > |- Total banned: 0 > `- Banned IP list: > > # grep ...

In https://wiki.dovecot.org/HowTo/Fail2Ban, for a current (I know for a fact in 2.2.36) I believe it should be filter = dovecot instead of filter = dovecot-pop3imap [root at mail ~]# ls -l /etc/fail2ban/filter.d/doveco* -rw-r--r-- 1 root root 1875 May 11 2017 /etc/fail2ban/filter.d/dovecot.conf [root at mail ~]#

...o setup and test fail2ban with dovecot > > I've installed fail2ban, I've copied config from > https://wiki2.dovecot.org/HowTo/Fail2Ban, and, trying to test it, > > attempted multiple mail access with wrong password, but, get this: > > # fail2ban-client status dovecot-pop3imap > Status for the jail: dovecot-pop3imap > |- Filter > | |- Currently failed: 0 > | |- Total failed: 0 > | `- File list: /var/log/dovecot.log > `- Actions > |- Currently banned: 0 > |- Total banned: 0 > `- Banned IP list: > > # grep 'a...

...gin: Disconnected (no auth attempts): rip=84.150.52.31, lip=78.46.216.126 Connecting via Thunderbird to STARTTLS won't work, but with a website from the same server it works for tls://opsys.de. So why is the port closed for external ip's? IPTABLES entry for imap is this: fail2ban-dovecot-pop3imap tcp -- anywhere anywhere multiport dports pop3,pop3s,imap2,imaps Key files are correct TLS is working from localhost. System is Debian squeeze -- Markus Fritz Administration opsys.de

...ut the imap part of dovecot creates the for mbox specific files, but why? I created a passwd-file for a testuser. At this tme, there is only on line: test2 at dev2.abc.de:ujAN28k8.5zV2:99:99:*:*:*:* in dovecot.conf are these interesting lines: auth_userdb = static uid=99 gid=99 home=/vrmd/pop3imap/links2mailboxes/%u/Maildir auth_passdb = passwd-file /vrmd/mailin/conf/pop3imapdb.passdb.txt I think, if a path ends of /Maildir dovecot will autodetect the maildir format. So what is wrong? Regards Mirko

...TING -o br0 -j MASQUERADE -A POSTROUTING -o eth0 -j MASQUERADE COMMIT # Completed on Tue Sep 27 22:17:35 2016 # Generated by iptables-save v1.4.7 on Tue Sep 27 22:17:35 2016 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :IP4BOGONS - [0:0] :f2b-default - [0:0] :f2b-dovecot-pop3imap - [0:0] -A INPUT -m set --match-set blacklistnet src -j DROP -A INPUT -m set --match-set blacklist src -j DROP -A INPUT -s 127.0.0.1/32 -j ACCEPT -A INPUT -m set --match-set block src -j DROP COMMIT # Completed on Tue Sep 27 22:17:35 2016 And my ifconfig: eth0 Link encap:Ethernet HWadd...