Hello! Answer was sorted out as SPAM.
> Content analysis details: (7.0 points, 5.0 required) > > pts rule name description > ---- ---------------------- -------------------------------------------------- > -2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at https://www.dnswl.org/, > medium trust > [216.105.38.7 listed in list.dnswl.org] > -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% > [score: 0.0000] > -0.0 SPF_HELO_PASS SPF: HELO matches SPF record > -0.0 SPF_PASS SPF: sender matches SPF record > 5.0 FROM_NOT_REPLYTO_SAME_DOMAIN From domain: does not match Reply-To: > domain > 2.0 FROM_NOT_REPLYTO From: does not match Reply-To: > 3.0 FROM_IS_TO From: and To: is the same > -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from > author's > domain > 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not > necessarily valid > -0.1 DKIM_VALID Message has at least one valid DKIM or DK > signature > -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list > manager > 2.3 FORGED_MUA_MOZILLA Forged mail pretending to be from Mozilla > -0.0 DKIMWL_WL_HIGH DKIMwl.org - Whitelisted High sender >> How do I set a correct datepattern in jail.conf? > What is the date pattern in the log? The "%" must be escaped in the .conf: > %%. [...] I only see this in the logfile: 2020-03-08 05:58:44,167 fail2ban.filter [2195]: WARNING Found a match for u'185.39.10.73 - - [08/Mar/2020:05:58:44 +0100] "GET /site/wp-login.php HTTP/1.1" 404 215' but no valid date/time found for u'185.39.10.73 - - [08/Mar/2020:05:58:44 +0100] "GET /site/wp-login.php HTTP/1.1" 404 215'. Please try setting a custom date pattern (see man page jail.conf(5)). If format is complex, please file a detailed issue on https://github.com/fail2ban/fail2ban/issues in order to get support for this format. Is 2020-03-08 05:58:44,167 the datepattern or is it 08/Mar/2020:05:58:44 +0100? How do I correct it? Regards Andreas _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
