🐛 Bug: <csf not block imapd auth failed>

[ale82x]

CSF › Version

15.10

CSF › Release

Stable

System › OS

Linux

System › Distro & Version

rocky linux 9.7

Control Panel › Name

Webmin

Priority

Normal

Issue Description

Hello,
i'm using CSF from years...

now i installed a new server (like with old CSF) and use this new version on github (big thank you!!!)
i use CSF for i open SSH only from my ip's and to ban bad actors...

on new server with csf 15.10 i check but csf won't ban bad ip.....

this is my config (only the highlights)
TESTING = "0"
TCP_IN = "25,80,110,143,443,465,587,993,995"
TCP6_IN = "25,80,110,143,443,465,587,993,995"
LF_IMAPD = "30"
LF_IMAPD_PERM = "3600"
POP3D_LOG = "/var/log/maillog"
IMAPD_LOG = "/var/log/maillog"

but if i can (from another server)
telnet 1.2.3.4 143

thren

. login example@example.org mypassword

of course is bad password, and try more 30 times csf not block

on server with csf 15.10 if i try

cat /var/log/maillog | grep "auth failed"

i see (more times)

May 2 19:14:28 s6 dovecot[195298]: imap-login: Disconnected: Too many invalid commands (auth failed, 1 attempts in 8 secs): user=example@example.org, method=PLAIN, rip=5.6.7.8, lip=1.2.3.4, session=

can you help me to understand?
thank you in advance

Steps To Reproduce

try to install csf 15.10 on rocky linux 10

Logs › Lfd

May 2 19:18:00 s6 lfd[940243]: Country Code Lookups...
May 2 19:18:00 s6 lfd[940243]: System Integrity Tracking...
May 2 19:18:00 s6 lfd[940243]: Exploit Tracking...
May 2 19:18:00 s6 lfd[940243]: Directory Watching...
May 2 19:18:00 s6 lfd[940243]: Temp to Perm Block Tracking...
May 2 19:18:00 s6 lfd[940243]: System Statistics...
May 2 19:18:01 s6 lfd[940243]: Port Scan Tracking...
May 2 19:18:01 s6 lfd[940243]: Connection Tracking...
May 2 19:18:01 s6 lfd[940243]: Process Tracking...
May 2 19:18:01 s6 lfd[940243]: Account Tracking...
May 2 19:18:01 s6 lfd[940243]: SSH Tracking...
May 2 19:18:01 s6 lfd[940243]: Webmin Tracking...
May 2 19:18:01 s6 lfd[940243]: SU Tracking...
May 2 19:18:01 s6 lfd[940243]: Console Tracking...
May 2 19:18:01 s6 lfd[940243]: Watching /var/log/messages...
May 2 19:18:01 s6 lfd[940243]: Watching /var/log/customlog...
May 2 19:18:01 s6 lfd[940243]: Watching /var/log/httpd/error_log...
May 2 19:18:01 s6 lfd[940243]: Watching /var/log/maillog...
May 2 19:18:01 s6 lfd[940243]: Watching /var/log/secure...

Config › csf.conf

No response

Screenshots

No response

[BinaryServ]

💡 It appears you might need help, please check the resources below for documentation that might assist with your issue:

• Documentation

---

_{I am a bot reaching out to you with an automated response. If the above info doesn't apply to you, please ignore it.}

[Aetherinox]

Just so I know what environment to set up, are you running Rocky Linux 9.7 or 10, because you mention in the reproduction that you're on 9.7, but you entered 10 in the version field.

[ale82x]

sorry, rocky linux 9.7

cat /etc/os-release NAME="Rocky Linux" VERSION="9.7 (Blue Onyx)" ID="rocky" ID_LIKE="rhel centos fedora" VERSION_ID="9.7" PLATFORM_ID="platform:el9" PRETTY_NAME="Rocky Linux 9.7 (Blue Onyx)" ANSI_COLOR="0;32" LOGO="fedora-logo-icon" CPE_NAME="cpe:/o:rocky:rocky:9::baseos" HOME_URL="https://rockylinux.org/" VENDOR_NAME="RESF" VENDOR_URL="https://resf.org/" BUG_REPORT_URL="https://bugs.rockylinux.org/" SUPPORT_END="2032-05-31" ROCKY_SUPPORT_PRODUCT="Rocky-Linux-9" ROCKY_SUPPORT_PRODUCT_VERSION="9.7" REDHAT_SUPPORT_PRODUCT="Rocky Linux" REDHAT_SUPPORT_PRODUCT_VERSION="9.7" root@s6:~#

[ale82x]

for now i check old server always rocky 9.7 with old csf (confiserver) installed about 1 year ago.
and works fine...

on this server i try to integrare fail2ban with csf but I can't do it...

thank you in advance