Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#42387 - [postfix] log message changed in 2.11.2-1

Attached to Project: Arch Linux
Opened by Abc (Morrad) - Wednesday, 15 October 2014, 12:05 GMT
Last edited by Gaetan Bisson (vesath) - Wednesday, 22 October 2014, 17:34 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Gaetan Bisson (vesath)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

The logging format for a SASL login failure has changed in 2.11.2 compared with previous versions.

* Example from 2.11.1-1 mail.log

Oct 13 06:25:54 hostname postfix/smtpd[28266]: warning: c-50-172-177-86.hsd1.il.comcast.net[50.172.177.86]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

* Example from 2.11.2-1 mail.log

Oct 14 19:45:18 hostname postfix/smtpd[14928]: warning: s15706526.onlinehome-server.info[217.160.5.199]: SASL login authentication failed: UGFzc3dvcmQ6

Notice above that LOGIN -> login.

Since packages like fail2ban are case sensitive when monitoring logs, this breaks the default filters in place.

As a quick workaround, I've modified my fail2ban filter to work with the changed case of the logging.
This task depends upon

Closed by  Gaetan Bisson (vesath)
Wednesday, 22 October 2014, 17:34 GMT
Reason for closing:  Upstream
Comment by Gaetan Bisson (vesath) - Saturday, 18 October 2014, 18:20 GMT
Please report this upstream, preferably to both postfix and fail2ban.

Loading...