[Mailman-Users] Logging failed Admin logins [SEC=UNCLASSIFIED]

[Mark Sapiro]

Dale, Mark wrote:
>
>I've had a look through the Mailman log files and can't see that Mailman writes anywhere for failed login attempts (to the Admin page).


Correct.


>It seems that the best that can be done at the moment is to guess it from the POST entries in the Apache logs.
>
>Even there,  a failed login just reloads the page and  generates an Apache '200' (Okay) entry for the request.


Since Mailman 2.1.14, a login failure generates a 401. This should be
enough for a fail2ban regexp to identify these failures.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan