SquirrelMail
From Fail2ban
SquirrelMail is a webmail program.
[edit] Logging Outputs
Below are logging outputs of this software. These examples should be detected by Fail2ban. Please remove any confidential information before saving this page. Change IP addresses to 192.0.2.0/24.
If the offending host is not trivially visible in the logging output, please give more detailed information.
SquirrelMail version 1.4.13 with Apache-2.2.3
- 192.0.2.20 - - [26/Jan/2008:12:33:22 +0000] "POST /squirrelmail/src/redirect.php HTTP/1.1" 200 1170 "https://192.0.2.20/squirrelmail/src/login.php" "Mozilla/5.0 (X11; U; rv:1.8.1.11) Gecko/20071215 Firefox/2.0.0.11"
[edit] Failregex
The regular expressions below are proposed failregex for this software. Multiple regular expressions for failregex will only work with a version of Fail2ban greater than or equal to 0.7.6.
The tag <HOST> in the regular expressions below is just an alias for (?:::f{4,6}:)?(?P<host>\S+). The replacement is done automatically by Fail2ban when adding the regular expression. At the moment, exactly one named group host or <HOST> tag must be present in each regular expression.
Please, before editing this section, propose your changes in the discussion page first.
failregex =
