Fail2Ban and Squirrelmail

With the help of squirrel logger I now have Fail2Ban banning IPs from attempted logins of my webmail interface.  Configuring squirrel logger was a breeze.  I simple send it to syslog, where it is picked up by my log.  I created my own squirrelmail.conf for fail2ban which is below.

# Fail2Ban configuration file

# Option: failregex
failregex =  0: Failed webmail login: by.*\(.*\) at <HOST> on.*$

ignoreregex =

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.