[Mailman-Users] Logging failed Admin logins [SEC=UNCLASSIFIED]

Mark Sapiro mark at msapiro.net
Mon May 21 23:09:55 CEST 2012

Dale, Mark wrote:
>I've had a look through the Mailman log files and can't see that Mailman writes anywhere for failed login attempts (to the Admin page).


>It seems that the best that can be done at the moment is to guess it from the POST entries in the Apache logs.
>Even there,  a failed login just reloads the page and  generates an Apache '200' (Okay) entry for the request.

Since Mailman 2.1.14, a login failure generates a 401. This should be
enough for a fail2ban regexp to identify these failures.

Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

More information about the Mailman-Users mailing list