• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Inviting everyone to the UX test of a new security feature in the WP Toolkit
    For WordPress site owners, threats posed by hackers are ever-present. Because of this, we are developing a new security feature for the WP Toolkit. If the topic of WordPress website security is relevant to you, we would be grateful if you could share your experience and help us test the usability of this feature. We invite you to join us for a 1-hour online session via Google Meet. Select a convenient meeting time with our friendly UX staff here.

Log IP-Addresses in authpsa error messages

LarsenD

Regular Pleskian
Hi,

I´ve got a lot of error messages like this from someone who is trying out email logins:
Nov 19 18:24:59 host courier-authdaemon: authpsa: short mail addresses are not allowed, got 'brett'

I´ve got fail2ban running but I would need the IP address to be able to block that someone. Is authpsa responsible for the messages and is authpsa from Parallels? If so, it would be really useful to have the IP address in the error message.


There also are other messages that I guess come from login scanning:
Nov 19 18:29:05 host qmail-queue-handlers[32703]: Unable to get sender domain by sender mailname

Perhaps it is also possible to patch qmail to print out the IP address in those cases, too.


Regards
Lars
 
courier-authdaemon as its name suggests is just an authentication daemon. Generally, it shouldn't care about client IP addresses (nor should its modules, which authpsa is). So it's reasonable that you don't see the address in the line you posted. Look a couple of lines above or below. IP address will be present in LOGIN/LOGOUT messages.
 
Back
Top