Gecko [ newweb.supercareproducts.com ]

Name	Size	Permission	Date
ignorecommands	[ DIR ]	drwxr-xr-x	2026-04-22 20:14
3proxy.conf	467 B	-rw-r--r--	2023-04-01 14:40
apache-auth.conf	3.15 KB	-rw-r--r--	2023-04-01 14:40
apache-badbots.conf	2.76 KB	-rw-r--r--	2023-04-01 14:40
apache-botsearch.conf	1.24 KB	-rw-r--r--	2023-04-01 14:40
apache-common.conf	1.58 KB	-rw-r--r--	2023-04-01 14:40
apache-fakegooglebot.conf	403 B	-rw-r--r--	2023-04-01 14:40
apache-modsecurity.conf	511 B	-rw-r--r--	2023-04-01 14:40
apache-nohome.conf	596 B	-rw-r--r--	2023-04-01 14:40
apache-noscript.conf	1.22 KB	-rw-r--r--	2023-04-01 14:40
apache-overflows.conf	2.14 KB	-rw-r--r--	2023-04-01 14:40
apache-pass.conf	362 B	-rw-r--r--	2023-04-01 14:40
apache-shellshock.conf	1020 B	-rw-r--r--	2023-04-01 14:40
assp.conf	3.41 KB	-rw-r--r--	2023-04-01 14:40
asterisk.conf	2.33 KB	-rw-r--r--	2023-04-01 14:40
bitwarden.conf	427 B	-rw-r--r--	2023-04-01 14:40
botsearch-common.conf	522 B	-rw-r--r--	2023-04-01 14:40
centreon.conf	307 B	-rw-r--r--	2023-04-01 14:40
common.conf	2.71 KB	-rw-r--r--	2023-04-01 14:40
counter-strike.conf	244 B	-rw-r--r--	2023-04-01 14:40
courier-auth.conf	463 B	-rw-r--r--	2023-04-01 14:40
courier-smtp.conf	512 B	-rw-r--r--	2023-04-01 14:40
cyrus-imap.conf	444 B	-rw-r--r--	2023-04-01 14:40
directadmin.conf	338 B	-rw-r--r--	2023-04-01 14:40
domino-smtp.conf	2.06 KB	-rw-r--r--	2023-04-01 14:40
dovecot.conf	2.58 KB	-rw-r--r--	2023-04-01 14:40
dropbear.conf	1.69 KB	-rw-r--r--	2023-04-01 14:40
drupal-auth.conf	547 B	-rw-r--r--	2023-04-01 14:40
ejabberd-auth.conf	1.54 KB	-rw-r--r--	2023-04-01 14:40
exim-common.conf	534 B	-rw-r--r--	2023-04-01 14:40
exim-spam.conf	2.11 KB	-rw-r--r--	2023-04-01 14:40
exim.conf	2.81 KB	-rw-r--r--	2023-04-01 14:40
freeswitch.conf	1.88 KB	-rw-r--r--	2023-04-01 14:40
froxlor-auth.conf	1.18 KB	-rw-r--r--	2023-04-01 14:40
gitlab.conf	236 B	-rw-r--r--	2023-04-01 14:40
grafana.conf	388 B	-rw-r--r--	2023-04-01 14:40
groupoffice.conf	236 B	-rw-r--r--	2023-04-01 14:40
gssftpd.conf	322 B	-rw-r--r--	2023-04-01 14:40
guacamole.conf	1.41 KB	-rw-r--r--	2023-04-01 14:40
haproxy-http-auth.conf	1.14 KB	-rw-r--r--	2023-04-01 14:40
horde.conf	404 B	-rw-r--r--	2023-04-01 14:40
kerio.conf	938 B	-rw-r--r--	2023-04-01 14:40
lighttpd-auth.conf	459 B	-rw-r--r--	2023-04-01 14:40
mongodb-auth.conf	2.23 KB	-rw-r--r--	2023-04-01 14:40
monit.conf	787 B	-rw-r--r--	2023-04-01 14:40
monitorix.conf	640 B	-rw-r--r--	2023-04-01 14:40
mssql-auth.conf	441 B	-rw-r--r--	2023-04-01 14:40
murmur.conf	927 B	-rw-r--r--	2023-04-01 14:40
mysqld-auth.conf	953 B	-rw-r--r--	2023-04-01 14:40
nagios.conf	400 B	-rw-r--r--	2023-04-01 14:40
named-refused.conf	1.56 KB	-rw-r--r--	2023-04-01 14:40
nginx-bad-request.conf	474 B	-rw-r--r--	2023-04-01 14:40
nginx-botsearch.conf	740 B	-rw-r--r--	2023-04-01 14:40
nginx-http-auth.conf	1.02 KB	-rw-r--r--	2023-04-01 14:40
nginx-limit-req.conf	1.48 KB	-rw-r--r--	2023-04-01 14:40
nsd.conf	779 B	-rw-r--r--	2023-04-01 14:40
openhab.conf	452 B	-rw-r--r--	2023-04-01 14:40
openwebmail.conf	495 B	-rw-r--r--	2023-04-01 14:40
oracleims.conf	1.89 KB	-rw-r--r--	2023-04-01 14:40
pam-generic.conf	947 B	-rw-r--r--	2023-04-01 14:40
perdition.conf	568 B	-rw-r--r--	2023-04-01 14:40
php-url-fopen.conf	891 B	-rw-r--r--	2023-04-01 14:40
phpmyadmin-syslog.conf	278 B	-rw-r--r--	2023-04-01 14:40
portsentry.conf	242 B	-rw-r--r--	2023-04-01 14:40
postfix.conf	3.15 KB	-rw-r--r--	2023-04-01 14:40
proftpd.conf	1.14 KB	-rw-r--r--	2023-04-01 14:40
pure-ftpd.conf	2.35 KB	-rw-r--r--	2023-04-01 14:40
qmail.conf	795 B	-rw-r--r--	2023-04-01 14:40
recidive.conf	1.34 KB	-rw-r--r--	2023-04-01 14:40
roundcube-auth.conf	1.46 KB	-rw-r--r--	2023-04-01 14:40
scanlogd.conf	354 B	-rw-r--r--	2023-04-01 14:40
screensharingd.conf	821 B	-rw-r--r--	2023-04-01 14:40
selinux-common.conf	538 B	-rw-r--r--	2023-04-01 14:40
selinux-ssh.conf	570 B	-rw-r--r--	2023-04-01 14:40
sendmail-auth.conf	790 B	-rw-r--r--	2023-04-01 14:40
sendmail-reject.conf	2.9 KB	-rw-r--r--	2023-04-01 14:40
sieve.conf	371 B	-rw-r--r--	2023-04-01 14:40
slapd.conf	706 B	-rw-r--r--	2023-04-01 14:40
softethervpn.conf	451 B	-rw-r--r--	2023-04-01 14:40
sogo-auth.conf	722 B	-rw-r--r--	2023-04-01 14:40
solid-pop3d.conf	1.07 KB	-rw-r--r--	2023-04-01 14:40
squid.conf	260 B	-rw-r--r--	2023-04-01 14:40
squirrelmail.conf	191 B	-rw-r--r--	2023-04-01 14:40
sshd.conf	7.69 KB	-rw-r--r--	2023-04-01 14:40
stunnel.conf	363 B	-rw-r--r--	2023-04-01 14:40
suhosin.conf	649 B	-rw-r--r--	2023-04-01 14:40
tine20.conf	890 B	-rw-r--r--	2023-04-01 14:40
traefik-auth.conf	2.33 KB	-rw-r--r--	2023-04-01 14:40
uwimap-auth.conf	374 B	-rw-r--r--	2023-04-01 14:40
vsftpd.conf	637 B	-rw-r--r--	2023-04-01 14:40
webmin-auth.conf	444 B	-rw-r--r--	2023-04-01 14:40
wuftpd.conf	520 B	-rw-r--r--	2023-04-01 14:40
xinetd-fail.conf	521 B	-rw-r--r--	2023-04-01 14:40
znc-adminlog.conf	912 B	-rw-r--r--	2023-04-01 14:40
zoneminder.conf	1.12 KB	-rw-r--r--	2023-04-01 14:40

Rename

# Fail2Ban filter Dovecot authentication and pop3/imap server
#

[INCLUDES]

before = common.conf

[Definition]

_daemon = (?:dovecot(?:-auth)?|auth)

_auth_worker = (?:dovecot: )?auth(?:-worker)?
_auth_worker_info = (?:conn \w+:auth(?:-worker)? $[^$]+\): auth(?:-worker)?<\d+>: )?
_bypass_reject_reason = (?:: (?:\w+$[^$:]*\) \w+|[^\(]+))*

prefregex = ^%(__prefix_line)s(?:%(_auth_worker)s(?:$[^$]+\))?: )?(?:%(__pam_auth)s(?:$dovecot:auth$)?: |(?:pop3|imap|managesieve|submission)-login: )?(?:Info: )?%(_auth_worker_info)s<F-CONTENT>.+</F-CONTENT>$

failregex = ^authentication failure; logname=<F-ALT_USER1>\S*</F-ALT_USER1> uid=\S* euid=\S* tty=dovecot ruser=<F-USER>\S*</F-USER> rhost=<HOST>(?:\s+user=<F-ALT_USER>\S*</F-ALT_USER>)?\s*$
            ^(?:Aborted login|Disconnected|Remote closed connection|Client has quit the connection)%(_bypass_reject_reason)s $(?:auth failed, \d+ attempts(?: in \d+ secs)?|tried to use (?:disabled|disallowed) \S+ auth|proxy dest auth failed)$:(?: user=<<F-USER>[^>]*</F-USER>>,)?(?: method=\S+,)? rip=<HOST>(?:[^>]*(?:, session=<\S+>)?)\s*$
            ^pam$\S+,<HOST>(?:,\S*)?$: pam_authenticate failed: (?:User not known to the underlying authentication module: \d+ Time$s$|Authentication failure $[Pp]assword mismatch\?$|Permission denied)\s*$
            ^[a-z\-]{3,15}$\S*,<HOST>(?:,\S*)?$: (?:[Uu]nknown user|[Ii]nvalid credentials|[Pp]assword mismatch)
            <mdre-<mode>>

mdre-aggressive = ^(?:Aborted login|Disconnected|Remote closed connection|Client has quit the connection)%(_bypass_reject_reason)s $(?:no auth attempts|disconnected before auth was ready,|client didn't finish \S+ auth,)(?: (?:in|waited) \d+ secs)?$:(?: user=<[^>]*>,)?(?: method=\S+,)? rip=<HOST>(?:[^>]*(?:, session=<\S+>)?)\s*$

mdre-normal =

# Parameter `mode` - `normal` or `aggressive`.
# Aggressive mode can be used to match log-entries like:
#   'no auth attempts', 'disconnected before auth was ready', 'client didn't finish SASL auth'.
# Note it may produce lots of false positives on misconfigured MTAs.
# Ex.:
# filter = dovecot[mode=aggressive]
mode = normal

ignoreregex =

journalmatch = _SYSTEMD_UNIT=dovecot.service

datepattern = {^LN-BEG}TAI64N
              {^LN-BEG}

# DEV Notes:
# * the first regex is essentially a copy of pam-generic.conf
# * Probably doesn't do dovecot sql/ldap backends properly (resolved in edit 21/03/2016)
#
# Author: Martin Waschbuesch
#         Daniel Black (rewrote with begin and end anchors)
#         Martin O'Neal (added LDAP authentication failure regex)
#         Sergey G. Brester aka sebres (reviewed, optimized, IPv6-compatibility)