fail2ban/fail2ban — pull request #734 by JoelSnyder (2014-06-03 06:16:45+00:00)
Title: Add Oracle Messaging Server filter

My Github skills are low. However, I think that I have the two files needed here, the new filter and the test cases. The modifications to jail.conf, however, I can't figure out how to add to this pull request. A few lines have to be added to jail.conf. Note that no "port" argument is here because the server listens on a wide variety of ports, all subject to modification by the system manager (including 25, 110, 143, 993, 995 typically plus commonly others such as 587)

# /opt/sun/comms/messaging64/log is the default
# location for Linux installations, but this may vary
# depending on the system manager's configuration and
# how the application was installed.
# Because of how mail clients work, it is desirable to
# have a more "generous" maxretry for this application
# than others. Anything 5 or less is likely to create
# false positives.
[oracleims]

enabled = false
logpath = /opt/sun/comms/messaging64/log/mail.log_current
maxretry = 6