Old 14th February 2013, 21:05
Classy_Manatee Classy_Manatee is offline
Junior Member
Join Date: Feb 2013
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
Default Configuring fail2ban

I am looking into putting fail2ban on a mail server to help reduce the number of outbound spam attacks. Is there a way to set it up to notify me when a user exceeds a maximum number of authentications (successful or failed) in a given time frame? So far I can only find how to set it for failed attempts.
Reply With Quote
Sponsored Links
Old 15th February 2013, 08:39
florian030 florian030 is offline
Senior Member
Join Date: Oct 2012
Posts: 276
Thanks: 8
Thanked 72 Times in 63 Posts

You can change the corresponding failregx so it matches successful and failed logins.

failregex = LOGIN FAILED, .*, ip=\[<HOST>\]$

failregex = LOGIN , .*, ip=\[<HOST>\]$
In the next step change maxretry and maybe the action for the jail.

After reloading the jail, fail2ban triggers on both login-types.

If you have problems with outbound spam,you should check your system instead of using f2b as a workaround.

Reply With Quote


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig 3 - MultiServer Setup - With Dedicated Control Panel - How? SuperJC Installation/Configuration 4 16th October 2012 21:03
Configuring fail2ban for Roundcube snowweb Server Operation 1 30th August 2012 10:02
Help with Fail2ban florix.net Installation/Configuration 4 26th January 2011 01:53
fail2ban is doing nothing? rlischer Server Operation 16 29th June 2010 08:29
Xen on Ubuntu kmand HOWTO-Related Questions 17 5th March 2009 19:43

All times are GMT +2. The time now is 04:22.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.