Added roundcube and squirrelmail to the BFM

Version 1.453

Feature
Finished

Changes to DA to allow it to scan: /var/www/html/roundcube/logs/errors /var/www/html/squirrelmail/data/squirrelmail_access_log for login failures, and the BFM will track the User/IP doing the attack. Changes made to: /usr/local/directadmin/data/templates/brute_filter.list roundcube1=ip_after= from &ip_until=. AUTHENTICATE PLAIN&text=IMAP Error: Login failed for&user_after=IMAP Error: Login failed for &user_until=%20from%20 squirrelmail1=ip_after=) from &ip_until=: Unknown user or&text=: Unknown user or password incorrect.&user_after=[LOGIN_ERROR] &user_until=%20( In order for SquirrelMail to log it's failed login attempts, the squirrel_logger plugin must be installed. CustomBuild 2.0 currently does this by default, but requires you to re-install squirrelmail: cd /usr/local/directadmin/custombuild ./build update ./build squirrelmail ------------------------------------------------------------------ If you have CustomBuild 1.2 or 1.1, this is related: cd /var/www/html/squirrelmail/plugins wget 'http://squirrelmail.org/countdl.php?fileurl=http%3A%2F%2Fwww.squirrelmail.org%2Fplugins%2Fsquirrel_logger-2.3.1-1.2.7.tar.gz' tar xvzf squirrel_logger-2.3.1-1.2.7.tar.gz cd squirrel_logger cp config_example.php config.php cd ../../config ./conf.pl Type 8, then enter for plugins. Type in the number of the squirrel_logger, and press enter to activate it. Press "S" to save, then "Q" to quit.

Interested to try DirectAdmin? Get a 30-day Free Trial!