After new update with MFA Fail2Ban not working

Support Security
1

Hello,

Ever since the current update that added MFA to WebMail login the Fail2Ban is not able to see an IP Address when a incorrect password is entered into WebMail.

This is what I se in the log.
image

I expect to see more like this.
image

As you can see for the webmail attempt it just shows api fail stuff. but for the SMTP In: is shows IP for Fail2Ban to actually deny and BAN.

Any suggestion for this?

Thanks in advance.
MT1

2

Hello,

Fail2ban should “consult” the dedicated security.txt log file and not the ones dedicated to enabled services.

Could you please confirm that all needed info are present in the dedicated log file?

HTH,
Ioan

1 Like
3

You are correct. After looking it seems the “consult” was everything.txt. I changes it to security.txt it appears to be working correctly now.

Thank You.
MT1