[Users] Help Request: Fail2ban for SASL-Auth Only

[L Mark Stone]

Regular expressions are a weak point with me and I've got DoSFilter working just fine already.

What I'm looking to do is implement Fail2ban -- but just for SASL-Auth failures on port 587, and leave DoSFilter keeping watch on mailboxd.

I've looked at a number of older Zimbra-fail2ban web sites, and none of the regex's there seem to match what I see in my logs for SASL-Auth failures.

If anyone has pointers to newer Zimbra fail2ban guides, especially if they work with Ubuntu's UFW, I'd be grateful.

Thanks in advance,
Mark

_________________________________________________

L. Mark Stone

Mission Critical Email LLC

mark.stone at missioncriticalemail.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zetalliance.org/pipermail/users_lists.zetalliance.org/attachments/20200602/63f06eb8/attachment.html>