diff --git a/HowtoFail2Ban.md b/HowtoFail2Ban.md index 7bf96b3b..e7de995b 100644 --- a/HowtoFail2Ban.md +++ b/HowtoFail2Ban.md @@ -309,21 +309,21 @@ backend = %(sshd_backend)s ### Dovecot -On ajoute la règle `filter.d/evolix-dovecot.conf` : +On ajoute la règle `filter.d/dovecot-evolix.conf` : ~~~{.ini} [Definition] -failregex = (?: pop3-login|imap-login): .*(?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed|Aborted login \(\d+ authentication attempts).*rip=(?P\S*),.* +failregex = (?: pop3-login|imap-login): .*(?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed|Aborted login \(\d+ authentication attempts).*rip=,.* ignoreregex = ~~~ puis on définit une jail ainsi : ~~~{.ini} -[dovecot] +[dovecot-evolix] enabled = true -filter = evolix-dovecot -port = pop3,pop3s,imap,imaps +filter = dovecot-evolix +port = pop3,pop3s,imap,imaps,imap2,imap3,smtp,ssmtp logpath = /var/log/mail.log ~~~