• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue Fail2ban parameters

xemorytr

Basic Pleskian
Server operating system version
Ubuntu 22.04.2 LTS
Plesk version and microupdate number
Version 18.0.50 Update #2
Hello everyone ,
I need information about fail2ban parameters and plesk-postfix to improve heem and how it can be done.

I think that if the feature I mentioned comes in the new update, it may be a better solution for everyone.

Invalid password for .+ by ([0-9a-f\.:]+)
Invalid password by ([0-9a-f\.:]+)
warning: .*\[([0-9a-f\.:]+)\]: SASL .+ authentication failed: (?!.*Connection lost to authentication server).+
warning: non-SMTP command from .*\[([0-9a-f\.:]+)]:.+
NOQUEUE: reject: RCPT from \[([0-9a-f\.:]+)].+Protocol error.+
-login: Disconnected.+ \(auth failed, .+\): user=.*, method=.+, rip=([0-9a-f\.:]+),
-login: Aborted login.+ \(auth failed .+\): user=.+, rip=([0-9a-f\.:]+), lip.+
-login: Aborted login.+ \(tried to use disallowed .+\): user=.+, rip=([0-9a-f\.:]+), lip.+
webmail.+ Login from '([0-9a-f\.:]+)' for user .+ might not have worked
([0-9a-f\.:]+) "GET \/webmail\/.* HTTP.+" 403 .+

These rules really need to be.

What steps can be followed for this?
Thank you.
 
Back
Top