Tune the order of ban rule.

iredmail · Oct 26, 2023 · 465aae7 · 465aae7
1 parent 21b8e8e
commit 465aae7
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/samples/fail2ban/filter.d/roundcube.iredmail.conf b/samples/fail2ban/filter.d/roundcube.iredmail.conf
@@ -1,9 +1,9 @@
 # 'X-Forwarded-For:` appears when Roundcube is running behind HAProxy.
 
 [Definition]
-failregex = roundcube.* Failed login for (.*) from <HOST>\. AUTHENTICATE LOGIN
+failregex = roundcube.* Failed login .*\(X-Forwarded-For: <HOST>\) in session
+            roundcube.* Failed login for (.*) from <HOST>\. AUTHENTICATE LOGIN
             roundcube.* Failed login for (.*) from <HOST> in session
-            roundcube.* Failed login .*\(X-Forwarded-For: <HOST>\) in session
             roundcube.* Error: Login failed for (.*) from <HOST>\. (LOGIN: Authentication failed|AUTHENTICATE LOGIN)
 
 ignoreregex =