Is this log line enough for fail2ban purposes?
Jan 25 16:56:13 uvt-yakkety postfix/smtpd[3313]: warning: unknown[192.168.122.1]: SASL login authentication failed: authentication failure
You have: - the service (smtpd) - the ip (192.168.122.1) - the failure reason ("authentication failure")
Is this log line enough for fail2ban purposes?
Jan 25 16:56:13 uvt-yakkety postfix/ smtpd[3313] : warning: unknown[ 192.168. 122.1]: SASL login authentication failed: authentication failure
You have:
- the service (smtpd)
- the ip (192.168.122.1)
- the failure reason ("authentication failure")