[Fail2ban-commit] SF.net SVN: fail2ban:[770] branches/FAIL2BAN-0_8/config/filter.d/dovecot. conf

[<yar...@us...>]

Revision: 770
          http://fail2ban.svn.sourceforge.net/fail2ban/?rev=770&view=rev
Author:   yarikoptic
Date:     2011-03-23 20:36:28 +0000 (Wed, 23 Mar 2011)

Log Message:
-----------
NF: Adding found on a drive filter.d/dovecot.conf

Added Paths:
-----------
    branches/FAIL2BAN-0_8/config/filter.d/dovecot.conf

Added: branches/FAIL2BAN-0_8/config/filter.d/dovecot.conf
===================================================================
--- branches/FAIL2BAN-0_8/config/filter.d/dovecot.conf	                        (rev 0)
+++ branches/FAIL2BAN-0_8/config/filter.d/dovecot.conf	2011-03-23 20:36:28 UTC (rev 770)
@@ -0,0 +1,23 @@
+# Fail2Ban configuration file for dovcot
+#
+# Author: 
+#
+# $Revision: $
+#
+
+[Definition]
+
+# Option:  failregex
+# Notes.:  regex to match the password failures messages in the logfile. The
+#          host must be matched by a group named "host". The tag "<HOST>" can
+#          be used for standard IP/hostname matching and is only an alias for
+#          (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
+# Values:  TEXT
+#
+failregex = .*(?: pop3-login|imap-login):.*(?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.*
+
+# Option:  ignoreregex
+# Notes.:  regex to ignore. If this regex matches, the line is ignored.
+# Values:  TEXT
+#
+ignoreregex = 


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.