Difference between revisions of "Exim"

From Fail2ban
Jump to navigationJump to search
 
 
Line 5: Line 5:
  
  
<div style="padding: 1em;border: 1px dashed #2f6fab;color: black;background-color: #f9f9f9;line-height: 1.1em;">
+
=== PLAIN authentication errors ===
* ???
 
</div>
 
  
 +
On CentOS 5 the debug file is /var/log/exim/main.log.
 +
 +
<pre>
 +
2010-10-03 16:50:37 PLAIN authenticator failed for (test) [192.0.2.1]: 535 Incorrect authentication data (set_id=test@test.net)
 +
</pre>
  
 
{{Failregex}}
 
{{Failregex}}
  
 +
=== PLAIN authentication errors ===
 +
 +
<pre>
 +
\[<HOST>\]: 535 Incorrect authentication data
 +
</pre>
 +
 +
=== Delivery errors ===
  
 
<div style="padding: 1em;border: 1px dashed #2f6fab;color: black;background-color: #f9f9f9;line-height: 1.1em;">
 
<div style="padding: 1em;border: 1px dashed #2f6fab;color: black;background-color: #f9f9f9;line-height: 1.1em;">

Latest revision as of 17:23, 3 October 2010

Exim is a mail transfer agent (MTA) used on Unix-like operating systems. The first version was written in 1995 by Philip Hazel for use in the University of Cambridge Computing Service's e-mail systems. There is currently a port of Exim to Microsoft Windows using the Cygwin emulation layer.

From Wikipedia, the free encyclopedia



PLAIN authentication errors

On CentOS 5 the debug file is /var/log/exim/main.log.

2010-10-03 16:50:37 PLAIN authenticator failed for (test) [192.0.2.1]: 535 Incorrect authentication data (set_id=test@test.net)


Failregex

The regular expressions below are proposed failregex for this software. Multiple regular expressions for failregex will only work with a version of Fail2ban greater than or equal to 0.7.6.

The tag <HOST> in the regular expressions below is just an alias for (?:::f{4,6}:)?(?P<host>\S+). The replacement is done automatically by Fail2ban when adding the regular expression. At the moment, exactly one named group host or <HOST> tag must be present in each regular expression.

Please, before editing this section, propose your changes in the discussion page first.

PLAIN authentication errors

\[<HOST>\]: 535 Incorrect authentication data

Delivery errors

  • \[<HOST>\] .*(?:rejected by local_scan|Unrouteable address)