From 07b9bd0ed44a092edd998753b355213127c327c8 Mon Sep 17 00:00:00 2001 From: jochen Date: Wed, 14 Oct 2026 15:34:55 +0200 Subject: [PATCH] Ban clients that try to log in on mail port 25 Port 25 takes no login, so a client that tries is guessing passwords; mailu's jail only matched Dovecot's failures and never banned them (issue 708). Relay attempts stay unbanned: postfix already refuses them. --- modules/mailu/module.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/mailu/module.json b/modules/mailu/module.json index b4cc6b2c..16c6eb69 100644 --- a/modules/mailu/module.json +++ b/modules/mailu/module.json @@ -697,7 +697,7 @@ "jails": [ { "name": "mailu-front", - "failregex": "^.*(?:imap|pop3|submission|managesieve)-login: .*\\(auth failed, \\d+ attempts(?: in \\d+ secs)?\\):.*rip=(?:,|$)", + "failregex": "^.*(?:imap|pop3|submission|managesieve)-login: .*\\(auth failed, \\d+ attempts(?: in \\d+ secs)?\\):.*rip=(?:,|$)\n ^.*client login failed: \"AUTH not supported\" while in http auth state, client: , server: \\S+:25,", "jail": "backend = systemd\njournalmatch = CONTAINER_NAME=mailu-front\nport = smtp,submission,submissions,imap,imaps,pop3,pop3s\nmaxretry = 3\nfindtime = 1d\nbantime = 1d" } ]