Re: Knocking on the door

[Marco Moock <mm@dorfdsl.de>]

Am 17.05.2024 um 15:49:52 Uhr schrieb Maurizio Caloro:

> Please i know that this arn't the Dovecot forum, but let me try, on
> the log's i have always knocking "unknown user" attempts.

Best place should be the f2b list:
https://sourceforge.net/p/fail2ban/mailman/fail2ban-users/

> > May 15 22:39:31 Dovecot/auth-worker(2602036): Info: conn
> > unix:auth-worker (pid=2602030,uid=113):
> > auth-worker<49>:sql(bin@domain.ch,194.169.175.10): unknown user
> 
> 
> yes i try with fail2ban, but i didn't see or found the right regex,
> so that this will be blocked please has any from you solve this
> knocking task?

Then post your current configured regex and the result of
fail2ban-regex.

> Von meinem iPhone gesendet

Please disable such advertisement.


-- 
Gruß
Marco