Rainloop-fail2ban

--------

/PATH-TO-RAINLOOP-DATA-FOLDER/..../application.ini

[logs]

auth_logging = On

auth_logging_filename = "fail2ban/auth-{date:Y-m-d}.txt"

auth_logging_format = "Auth failed: ip={request:ip} user={imap:login} host={imap:host} port={imap:port}"

 /etc/fail2ban/filter.d/rainloop.conf

[Definition] failregex = : Auth failed: ip=<HOST> user=.* host=.* port=.*$ ignoreregex = 

 /etc/fail2ban/jail.local

[rainloop] enabled = true banaction = iptables-multiport filter = rainloop port = http,https logpath = /PATH-TO-RAINLOOP-DATA-FOLDER/_default_/logs/fail2ban/auth-*.txt maxretry = 5 findtime = 1500 bantime = 3600

                      ------------------------------

-----