On 02/15/2015 10:08 AM, sebast...@debianfan.de wrote:
> Hello,
>
> i have a problem with fail2-ban 0.8.6. (debian wheezy standard).
>
> I installed fail2ban and activated the postfix jail.
>
> for this entry in /var/log/mail.log:
>
> Feb 15 15:56:24 servergeek postfix/smtpd[9113]: connect from
> mf01.rj-v.net[67.3.5.22]
> Feb 15 15:56:24 servergeek postfix/smtpd[9113]: NOQUEUE: reject: RCPT
> from mf01.rj-v.net[67.3.5.22]: 550 5.1.1 <m...@mydomain.de>: Recipient
> address rejected: User unknown in virtual mailbox table;
> from=<dar...@mailbox.org> to=<m...@domain.de> proto=ESMTP helo=<mf01.rj-v.net>
> Feb 15 15:56:24 servergeek postfix/smtpd[9113]: disconnect from
> mf01.rj-v.net[67.3.5.22]
>
> i got this message from fail2ban:
>
> 2015-02-15 15:56:10,177 fail2ban.filter : WARNING Unable to find a
> corresponding IP address for ::1
I don't believe IPv6 is supported by fail2ban, particularly not back
with version 0.8.6.
>
>
> # cat /etc/fail2ban/filter.d/postfix.conf
> # Fail2Ban configuration file
> #
> # Author: Cyril Jaquier
> #
> # $Revision$
> #
>
> [INCLUDES]
>
> # Read common prefixes. If any customizations available -- read them from
> # common.local
> before = common.conf
>
> [Definition]
>
> # Option: failregex
> # Notes.: regex to match the password failures messages in the logfile. The
> # host must be matched by a group named "host". The tag
> "<HOST>" can
> # be used for standard IP/hostname matching and is only an
> alias for
> # (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
> # Values: TEXT
> #
> _daemon = postfix/smtpd
>
> failregex = ^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]:
> 554 5\.7\.1 .*$
>
> # Option: ignoreregex
> # Notes.: regex to ignore. If this regex matches, the line is ignored.
> # Values: TEXT
> #
> ignoreregex =
>
>
>
>
> Is the fail2ban 0.8.6 standard package from debian not longer usable?
>
> Thanx
>
> Sebastian
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming. The Go Parallel Website,
> sponsored by Intel and developed in partnership with Slashdot Media, is your
> hub for all things parallel software development, from weekly thought
> leadership blogs to news, videos, case studies, tutorials and more. Take a
> look and join the conversation now. http://goparallel.sourceforge.net/
> _______________________________________________
> Fail2ban-users mailing list
> Fail2ban-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/fail2ban-users
------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
