Navigation

    Kopano
    • Register
    • Login
    • Search
    • Categories
    • Get Official Kopano Support
    • Recent
    Statement regarding the closure of the Kopano community forum and the end of the community edition

    Fail2Ban with kopano-ical

    Kopano Groupware Core
    1
    1
    158
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • noise
      noise last edited by noise

      Hello

      I successful installed kopano-ical i Ubuntu 18.04.6
      and configured with nginx at the end of z-push config:

      nano /etc/nginx/sites-available/z-push.conf
      
      location /caldav {
      proxy_set_header Host $host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_pass http://127.0.0.1:8080;
      }
      

      after that i wanted to configure fail2ban with kopano-ical but i stuck on the logfile at /var/log/kopano/ical.log
      I doesnt print any ip adress, the log look like:

      2022-06-03T23:55:50.202781: [kopano-ical|T4730] [=======] Starting kopano-ical version 11.0.2 (pid 4730 uid 0)
      2022-06-03T23:55:50.250371: [kopano-ical|T4730] [=======] Starting kopano-ical version 11.0.2 (pid 4730 uid 999)
      2022-06-03T23:56:13.703641: [kopano-ical|T4755] [error  ] HrLogon server "http://localhost:236/" user "bla bla": logon failed
      2022-06-03T23:56:13.705116: [kopano-ical|T4755] [warning] Login failed: logon failed (80040111). Resending authentication request.
      2022-06-03T23:56:15.050008: [kopano-ical|T4757] [error  ] HrLogon server "http://localhost:236/" user "bla bla": logon failed
      2022-06-03T23:56:15.050083: [kopano-ical|T4757] [warning] Login failed: logon failed (80040111). Resending authentication request.
      

      ical.cfg log settings:

      log_method = auto
      # Loglevel (0(none), 1(crit), 2(err), 3(warn), 4(notice), 5(info), 6(debug))
      log_level = 3
      log_file = /var/log/kopano/ical.log
      #log_timestamp = yes
      
      # The timezone of the system clock
      #server_timezone = Europe/Amsterdam
      # Enable the iCalendar GET method for downloading calendars
      #enable_ical_get = yes
      

      i try also syslog, and all log levels.
      But no luck to show the ip adress in the logfile.

      Here is also my filter and jail.local

      nano /etc/fail2ban/filter.d/kopano-ical.conf
      [INCLUDES]
      before = common.conf
      
      [Definition]
      
      failregex = ^.*Login failed.*\n^.*[notice ] [::ffff:<HOST>].*$
      
      ignoreregex =
      [Init]
      maxlines = 2
      
      nano /etc/fail2ban/jail.local
      [kopano-ical]
      
      enabled = true
      port = https
      filter = kopano-ical
      banaction = iptables-multiport
      action = %(action_)s
       sendmail-whois[name=Kopano-iCal, dest=email@domain.com]
      maxretry = 5
      bantime  = 1800 # 30 minutes
      logpath = /var/log/kopano/ical.log
      

      what am I doing wrong?

      Thanks in advance

      1 Reply Last reply Reply Quote 0
      • First post
        Last post