name : openwebmail.conf # Fail2Ban filter for Openwebmail # banning hosts with authentication errors in /var/log/openwebmail.log # OpenWebMail http://openwebmail.org # [Definition] failregex = ^ - \[\d+\] \(<HOST>\) (?P<USER>\S+) - login error - (no such user - loginname=(?P=USER)|auth_unix.pl, ret -4, Password incorrect)$ ^ - \[\d+\] \(<HOST>\) (?P<USER>\S+) - userinfo error - auth_unix.pl, ret -4, User (?P=USER) doesn't exist$ ignoreregex = # DEV Notes: # # Author: Ivo Truxa (c) 2013 truXoft.com