z-push fail2ban zimbrabackend



  • Hi @Manfred

    i have a question. I want to use fail2ban with z-push. With the kopano-backend this worked perfect, However with the zimbra-backend it does not?

    the failregex for fail2ban is not correct i think? it does not ban anything since i use zimbra backend

    failregex = IP: <HOST> failed to authenticate user

    I think we need a regex for this and then filter on the from=ip and httpcode-503

    14/04/2018 11:41:48 [ 2077] [ INFO] [#unknown] User-agent: 'Apple-iPad3C1/1307.36'
    14/04/2018 11:41:48 [ 2077] [FATAL] [#unknown] Exception: (ServiceUnavailableException) - Access denied. Proxy unable to reach user mailbox server
    14/04/2018 11:41:48 [ 2077] [DEBUG] [#unknown] LoopDetection->ProcessLoopDetectionTerminate()
    14/04/2018 11:41:48 [ 2077] [ INFO] [#unknown] cmd='Ping' memory='6.85 MiB/7.25 MiB' time='0.11s' devType='iPad' devId='q8frsj8sep7cb19q8in96f6qes' getUser='marcel' from='212.120.115.56' idle='0s' version='2.4.1+0' method='POST' httpcode='503' ```
    
    How can we do this?

  • Kopano

    Hi ckruijntjens,

    I don’t have the failregex for the zimbra backend, but there’s a thread on fail2ban with zimbra: https://forum.kopano.io/topic/331/z-push-fail2ban-backend-unavailable. You could ask there what was the solution.
    This might be helpful as well: https://forum.kopano.io/post/517 if you want to try to figure it out yourself.

    Manfred



  • @manfred

    Hi manfred thanx but zpush works better with kopano and i returned to kopano nowthat the core is working again!



  • @manfred

    Hi manfred thanx but zpush works better with kopano and i returned to kopano nowthat the core is working again!


Log in to reply