Merge pull request 'mailu: ban clients that try to log in on port 25 (hq issue 708)' (#295 ) from fix-708-mailu-jail-port25 into main

Ban clients that try to log in on mail port 25
Port 25 takes no login, so a client that tries is guessing passwords; mailu's jail only matched Dovecot's failures and never banned them (issue 708). Relay attempts stay unbanned: postfix already refuses them.
2026-10-14 13:39:51 +00:00 · 2026-10-14 15:34:55 +02:00
1 changed files with 1 additions and 1 deletions
@@ -697,7 +697,7 @@
  "jails": [
    {
      "name": "mailu-front",
-      "failregex": "^.*(?:imap|pop3|submission|managesieve)-login: .*\\(auth failed, \\d+ attempts(?: in \\d+ secs)?\\):.*rip=<HOST>(?:,|$)",
+      "failregex": "^.*(?:imap|pop3|submission|managesieve)-login: .*\\(auth failed, \\d+ attempts(?: in \\d+ secs)?\\):.*rip=<HOST>(?:,|$)\n            ^.*client login failed: \"AUTH not supported\" while in http auth state, client: <HOST>, server: \\S+:25,",
      "jail": "backend = systemd\njournalmatch = CONTAINER_NAME=mailu-front\nport = smtp,submission,submissions,imap,imaps,pop3,pop3s\nmaxretry = 3\nfindtime = 1d\nbantime = 1d"
    }
  ]
Author	SHA1	Message	Date
mesh-admin	cb7bf94a77	Merge pull request 'mailu: ban clients that try to log in on port 25 (hq issue 708)' (#295 ) from fix-708-mailu-jail-port25 into main	2026-10-14 13:39:51 +00:00
jochen	07b9bd0ed4	Ban clients that try to log in on mail port 25 mesh/merge-gate head 07b9bd0ed44a merged into trunk 02427a60ef78 — pass: builds mailu, sent nowhere; no bus step; 1 wait(s) for a person; every machine com… Details mesh/repo-check head 07b9bd0ed44a merged into trunk 02427a60ef78 — pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-… Details mesh/delivery delivered Details Port 25 takes no login, so a client that tries is guessing passwords; mailu's jail only matched Dovecot's failures and never banned them (issue 708). Relay attempts stay unbanned: postfix already refuses them.	2026-10-14 15:34:55 +02:00