Vpopmail
From Fail2ban
vpopmail is a free GPL software to manage virtual e-mail domains and non /etc/passwd e-mail accounts on qmail or Postfix mail servers.
[edit] Logging Outputs
Below are logging outputs of this software. These examples should be detected by Fail2ban. Please remove any confidential information before saving this page. Change IP addresses to 192.0.2.0/24.
If the offending host is not trivially visible in the logging output, please give more detailed information.
- May 11 10:12:57 mail vpopmail[12345]: vchkpw-pop3: vpopmail user not found admin@:12.34.56.78
[edit] Failregex
The regular expressions below are proposed failregex for this software. Multiple regular expressions for failregex will only work with a version of Fail2ban greater than or equal to 0.7.6.
The tag <HOST> in the regular expressions below is just an alias for (?:::f{4,6}:)?(?P<host>\S+). The replacement is done automatically by Fail2ban when adding the regular expression. At the moment, exactly one named group host or <HOST> tag must be present in each regular expression.
Please, before editing this section, propose your changes in the discussion page first.
- vchkpw-pop3: vpopmail user not found .*@:<HOST>
