fail2ban couriertcpd:login失败不禁止
我的fail2ban没有像我期望的那样被禁止。 我的日志条目的一个例子是: Jul 26 07:11:29 mail couriertcpd: LOGIN FAILED, user=sally, ip=[::ffff:54.191.110.169] Jul 26 07:13:22 mail couriertcpd: LOGIN FAILED, user=ddos, ip=[::ffff:54.193.13.22] Jul 26 07:14:45 mail couriertcpd: LOGIN FAILED, user=sally, ip=[::ffff:54.191.110.169] 我courierstmp设置更多/etc/fail2ban/filter.d/courierlogin.conf [INCLUDES] before = common.conf [Definition] _daemon = (?:courier)?(?:imapd?|pop3d?)(?:login)?(?:-ssl)? failregex = ^%(__prefix_line)sLOGIN FAILED, user=.*, ip=\[<HOST>\]$ ignoreregex = 运行testing没有结果。 fail2ban-regex -v /var/log/mail.log /etc/fail2ban/filter.d/courierlogin.conf Running tests ============= Use […]