X-Git-Url: http://ftp.carnet.hr/pub/carnet-debian/scm?a=blobdiff_plain;f=etc%2Frules%2Fdovecot_rules.xml;h=cd49bf6838091826c147dd14adffd989d8e6af81;hb=HEAD;hp=61fa2f32e414ee63a9914834d6fafb3af4ff3719;hpb=914feba5d54f979cd5d7e69c349c3d01f630042a;p=ossec-hids.git
diff --git a/etc/rules/dovecot_rules.xml b/etc/rules/dovecot_rules.xml
index 61fa2f3..cd49bf6 100644
--- a/etc/rules/dovecot_rules.xml
+++ b/etc/rules/dovecot_rules.xml
@@ -41,7 +41,7 @@
9700
- user not found|User not known|unknown user
+ user not found|User not known|unknown user|auth failed
Dovecot Invalid User Login Attempt.
invalid_login,authentication_failed,
@@ -74,4 +74,18 @@
Dovecot brute force attack (multiple auth failures).
authentication_failures,
+
+
+ dovecot-info
+ dovecot-info grouping.
+
+
+
+ 9770
+ user not found|User not known|unknown user|auth failed
+ Dovecot Invalid User Login Attempt.
+ invalid_login,authentication_failed,
+
+
+