Re: Attack on the James Server
Günter Paul <[email protected]>
| Newsgroups | gmane.comp.jakarta.james.user |
|---|---|
| Message-ID | <[email protected]> |
Hi, at the end I'm using fail2ban. Thanks a lot for information. I see log4j2 works too with the parameters, so I found a solution for me. Best wishes Günter > Günter Paul <[email protected]> hat am 08.06.2023 22:23 CEST geschrieben: > > > Hi, > > Thanks, logback sounds good. I'm using the spring-version. I will try to change, hope it' possible without problems. > > Günter > > > Am 8. Juni 2023 18:21:55 MESZ schrieb David Matthews <[email protected]>: > >>To chip-in. It should be possible to configure logback to: output only log entries for failing > >>connections (e.g. for org.apache.james.protocols.smtp.core.esmtp.AuthCmdHandler.doAuthTest) and with > >>simplified entry (e.g. only the error message) that should make writing regexp simpler. > >> > > > >yes, that would help > > > >With my exim4 setup, fail2ban is only looking at the rejectlog. You can't just ban everything though as you'd lock yourself out next time you fat fingered the password. > > > >-- > >David Matthews > >[email protected] > > > > > >--------------------------------------------------------------------- > >To unsubscribe, e-mail: [email protected] > >For additional commands, e-mail: [email protected] > >