View Single Post
  #6  
Old 26th July 2012, 15:23
pawan pawan is offline
Senior Member
 
Join Date: Jul 2010
Posts: 210
Thanks: 42
Thanked 5 Times in 5 Posts
Default

Thanks Falko. I am giving below the contents of sasl.conf in filter.d folder.

Is there any other file called saslauthd filter file?

Code:
# Fail2Ban configuration file
#
# Author: Yaroslav Halchenko
#
# $Revision: 728 $
#

[Definition]

# Option: failregex
# Notes.: regex to match the password failures messages in the logfile. The
#          host must be matched by a group named "host". The tag "<HOST>" can
#          be used for standard IP/hostname matching and is only an alias for
#          (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
# Values: TEXT
#
failregex = (?i): warning: [-._\w]+\[<HOST>\]: SASL (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(: [A-Za-z0-9+/]*={0,2})?$


Option:  ignoreregex
# Notes.:  regex to ignore. If this regex matches, the line is ignored.
# Values:  TEXT
#
#ignoreregex =
Reply With Quote