Bug 2255017 - Roundcube filter broken
Summary: Roundcube filter broken
Keywords:
Status: NEW
Alias: None
Product: Fedora EPEL
Classification: Fedora
Component: fail2ban
Version: epel9
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Orion Poplawski
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-12-18 14:03 UTC by Frank Büttner
Modified: 2024-02-22 18:44 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Frank Büttner 2023-12-18 14:03:26 UTC 
Description of problem:
The roundcube filter will not detect failed logins.

Version-Release number of selected component (if applicable):
fail2ban-server-1.0.2-7.el9.noarch
Roundcube: 1.6.5

How reproducible:
Every time

Steps to Reproduce:
1. Log in with in invalid user

Actual results:
The failed log in are not detected

Expected results:
Fail2ban detect the failed log in

Additional info:
Same line for an failed log in (journal):
Dez 18 15:00:58 Roundcube[118773]: <rbfi2j6d> IMAP Error: Login failed for <User> against <Target FQDN> from <User IP>. AUTHENTICATE PLAIN: Authentication failed. in /var/www/roundcube/program/lib/Roundcube/rcube_imap.php on line 211 (POST /?_task=login&_action=login

jain config:
[roundcube]
enabled = true
protocol = tcp
logpath =
journalmatch='SYSLOG_IDENTIFIER=Roundcube'
filter = roundcube-auth
Comment 1 Orion Poplawski 2024-02-22 18:44:09 UTC 
I would suggest reporting this upstream: https://github.com/fail2ban/fail2ban/issues
Note You need to log in before you can comment on or make changes to this bug.