From 244a96f9b3fb58867f073957714cf4d464cde80a Mon Sep 17 00:00:00 2001
From: Terence Namusonge <terence.namusonge@gmail.com>
Date: Sat, 25 May 2013 19:26:13 +0200
Subject: [PATCH] fixed failregex line for roundcube 0.9+

# Only works only if  log driver: is set to  'syslog'. this is becoz fail2ban fails to 'read' the line due to the
 brackets around the date timestamp on logline when log driver is set to file
---
 config/filter.d/roundcube-auth.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/config/filter.d/roundcube-auth.conf b/config/filter.d/roundcube-auth.conf
index 41766e31..7b153f44 100644
--- a/config/filter.d/roundcube-auth.conf
+++ b/config/filter.d/roundcube-auth.conf
@@ -1,6 +1,6 @@
 # Fail2Ban configuration file for roundcube web server
 #
-# Author: Teodor Micu & Yaroslav Halchenko
+# Author: Teodor Micu & Yaroslav Halchenko & terence namusonge
 #
 #
 
@@ -13,7 +13,7 @@
 #          (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
 # Values:  TEXT
 #
-failregex = FAILED login for .*. from <HOST>\s*$
+failregex = (FAILED login|Login failed) for .* from <HOST>\s*$
 
 # Option:  ignoreregex
 # Notes.:  regex to ignore. If this regex matches, the line is ignored.