z-push fail2ban zimbrabackend

i have a question. I want to use fail2ban with z-push. With the kopano-backend this worked perfect, However with the zimbra-backend it does not?

the failregex for fail2ban is not correct i think? it does not ban anything since i use zimbra backend

failregex = IP: <HOST> failed to authenticate user

I think we need a regex for this and then filter on the from=ip and httpcode-503

14/04/2018 11:41:48 [ 2077] [ INFO] [#unknown] User-agent: 'Apple-iPad3C1/1307.36'
14/04/2018 11:41:48 [ 2077] [FATAL] [#unknown] Exception: (ServiceUnavailableException) - Access denied. Proxy unable to reach user mailbox server
14/04/2018 11:41:48 [ 2077] [DEBUG] [#unknown] LoopDetection->ProcessLoopDetectionTerminate()
14/04/2018 11:41:48 [ 2077] [ INFO] [#unknown] cmd='Ping' memory='6.85 MiB/7.25 MiB' time='0.11s' devType='iPad' devId='q8frsj8sep7cb19q8in96f6qes' getUser='marcel' from='212.120.115.56' idle='0s' version='2.4.1+0' method='POST' httpcode='503' ```

How can we do this?

Manfred

Hi ckruijntjens,

I don’t have the failregex for the zimbra backend, but there’s a thread on fail2ban with zimbra: https://forum.kopano.io/topic/331/z-push-fail2ban-backend-unavailable. You could ask there what was the solution.
This might be helpful as well: https://forum.kopano.io/post/517 if you want to try to figure it out yourself.

Manfred

@manfred

Hi manfred thanx but zpush works better with kopano and i returned to kopano nowthat the core is working again!

@manfred

Hi manfred thanx but zpush works better with kopano and i returned to kopano nowthat the core is working again!