Content
- Log parsers1
- Attack scenarios1
Dovecot - Bruteforce Protection
Collection
- Version
- 0.2
- Name
- crowdsecurity/dovecot
dovecot support : parser and spammer detection
Install with a top-level collection
3 collections include itsudo cscli collections install crowdsecurity/apiscpInstalls 9 parsers and 56 scenarios.
View ApisCP →Installation
sudo cscli collections install crowdsecurity/dovecotThen reload CrowdSec: sudo systemctl reload crowdsec
Sign in to see which of your engines run it →Configuration
Hover a line or a note to see what each field does.
name: crowdsecurity/dovecotparsers:- crowdsecurity/dovecot-logsscenarios:- crowdsecurity/dovecot-spamdescription: "dovecot support : parser and spammer detection"labels:label: "Dovecot - Bruteforce Protection"author: crowdsecuritytags:- security_engine- linux- spam- bruteforce
Installed on
Know where it runs
Sign in to see the Security Engines that run this collection, the version they run and whether it was modified locally.
Documentation
Dovecot collection
A collection for dovecot
- dovecot log parsers
- dovecot scenario bruteforce spam attempt
This collection mostly aims at getting similar spam protection as the normal fail2ban dovecot configuration.
Contribution by https://github.com/LtSich
Acquisition template
Example acquisition for this collection :
1filenames:2 - /var/log/mail.log3labels:4 type: syslog
notes :
- Depending on your distribution/OS, paths to log files might change
- Only relevant if you are manually installing collection