Re: Attack on the James Server
Günter Paul <[email protected]>
| Newsgroups | gmane.comp.jakarta.james.user |
|---|---|
| Message-ID | <[email protected]> |
Hi, Thanks, logback sounds good. I'm using the spring-version. I will try to change, hope it' possible without problems. Günter Am 8. Juni 2023 18:21:55 MESZ schrieb David Matthews <[email protected]>: >>To chip-in. It should be possible to configure logback to: output only log entries for failing >>connections (e.g. for org.apache.james.protocols.smtp.core.esmtp.AuthCmdHandler.doAuthTest) and with >>simplified entry (e.g. only the error message) that should make writing regexp simpler. >> > >yes, that would help > >With my exim4 setup, fail2ban is only looking at the rejectlog. You can't just ban everything though as you'd lock yourself out next time you fat fingered the password. > >-- >David Matthews >[email protected] > > >--------------------------------------------------------------------- >To unsubscribe, e-mail: [email protected] >For additional commands, e-mail: [email protected] >