[prev in list] [next in list] [prev in thread] [next in thread]
List: fail2ban-users
Subject: Re: [Fail2ban-users] Fail2ban constantly banning dovecot client
From: Noel Butler <noel.butler () ausics ! net>
Date: 2017-06-28 6:09:09
Message-ID: d13d864126c603439b2f13b5d8de7730 () ausics ! net
[Download RAW message or body]
[Attachment #2 (multipart/signed)]
[Attachment #4 (multipart/alternative)]
Add to [dovecot] section
ignoreip = space separated list of ips
On 28/06/2017 15:30, Lucas Cotta wrote:
> Hello,
>
> I have dovecot in my server to provide POP access.
> Then I use my Gmail account to access it.
>
> I had an issue in my server yesterday and apparently Gmail "pinging" requests \
> failed during that time and now fail2ban continues to block Google's IPs forever.
> I have already unbaned all the IPs, cleared /VAR/LOG/MAILLOG and \
> /VAR/LOG/FAIL2BAN.LOG but with no success, the same IPs continues to get banned.
> What else can I do?
> Centos 7
>
> /etc/fail2ban/jail.local
> findtime = 604800
> bantime = 2592000
> maxretry = 3
> ...
> [dovecot]
> enabled = true
> port = pop3,pop3s,imap,imaps
> filter = dovecot
> logpath = /var/log/maillog
> ...
>
> Thanks
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Fail2ban-users mailing list
> Fail2ban-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/fail2ban-users
--
Kind Regards,
Noel Butler
This Email, including any attachments, may contain legally privileged
information, therefore remains confidential and subject to copyright
protected under international law. You may not disseminate, discuss, or
reveal, any part, to anyone, without the authors express written
authority to do so. If you are not the intended recipient, please notify
the sender then delete all copies of this message including attachments,
immediately. Confidentiality, copyright, and legal privilege are not
waived or lost by reason of the mistaken delivery of this message. Only
PDF [1] and ODF [2] documents accepted, please do not send proprietary
formatted documents
Links:
------
[1] http://www.adobe.com/
[2] http://en.wikipedia.org/wiki/OpenDocument
[Attachment #7 (unknown)]
<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" \
/></head><body style='font-size: 10pt'> <p>Add to [dovecot] section</p>
<p>ignoreip = space separated list of ips</p>
<p>On 28/06/2017 15:30, Lucas Cotta wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; \
margin: 0"><!-- html ignored --><!-- head ignored --><!-- meta ignored --> <div \
dir="ltr">Hello, <div> </div>
<div>I have dovecot in my server to provide POP access.
<div>Then I use my Gmail account to access it. </div>
<div> </div>
<div>I had an issue in my server yesterday and apparently Gmail "pinging" requests \
failed during that time and now fail2ban continues to block Google's IPs \
forever.</div> <div> </div>
<div>I have already unbaned all the IPs, cleared <strong>/var/log/maillog</strong> \
and <strong>/var/log/fail2ban.log</strong> but with no success, the same IPs \
continues to get banned. </div> <div> </div>
<div>What else can I do?</div>
<div> </div>
<strong>Centos 7<br /><br />/etc/fail2ban/jail.local</strong><br />findtime = \
604800<br />bantime = 2592000<br />maxretry = 3<br />...<br />[dovecot]<br \
/>enabled = true<br />port = pop3,pop3s,imap,imaps<br />filter = dovecot<br />logpath \
= /var/log/maillog<br />... <div>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo; \
color: #000000;"><span style="font-variant-ligatures: \
no-common-ligatures;"> </span></p> </div>
<div>Thanks</div>
<div> </div>
</div>
</div>
<br />
<div class="pre" style="margin: 0; padding: 0; font-family: \
monospace">------------------------------------------------------------------------------<br \
/> Check out the vibrant tech community on one of the world's most<br /> engaging \
tech sites, Slashdot.org! <a \
href="http://sdm.link/slashdot">http://sdm.link/slashdot</a></div> <br />
<div class="pre" style="margin: 0; padding: 0; font-family: \
monospace">_______________________________________________<br /> Fail2ban-users \
mailing list<br /><a \
href="mailto:Fail2ban-users@lists.sourceforge.net">Fail2ban-users@lists.sourceforge.net</a><br \
/><a href="https://lists.sourceforge.net/lists/listinfo/fail2ban-users">https://lists.sourceforge.net/lists/listinfo/fail2ban-users</a></div>
</blockquote>
<p><br /></p>
<div>-- <br />
<p>Kind Regards,</p>
<p>Noel Butler</p>
<table border="1" width="748" cellspacing="0" cellpadding="5">
<tbody>
<tr>
<td style="text-align: left;"><span style="font-size: \
10pt;"><small><small><small><small>This Email, including any attachments, may contain \
legally privileged information, therefore remains confidential and subject to \
copyright protected under international law. You may not disseminate, discuss, or \
reveal, any part, to anyone, without the authors express written authority to do so. \
If you are not the intended recipient, please notify the sender then delete all \
copies of this message including attachments, immediately. Confidentiality, \
copyright, and legal privilege are not waived or lost by reason of the mistaken \
delivery of this message. Only <a href="http://www.adobe.com/">PDF</a> and <a \
href="http://en.wikipedia.org/wiki/OpenDocument">ODF</a> documents accepted, please \
do not send proprietary formatted documents \
</small></small></small></small></span></td> </tr>
</tbody>
</table>
</div>
</body></html>
["signature.asc" (application/pgp-signature)]
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic