Notify on failed login - both for web UI and general smtp/imap?

zoomba

Is there any chance of getting an alert if someone tries to login with one of my configured aliases, and that login fails?

As a matter of fact, could mailcow shoot out an alert if anyone at all tries to login to an account and fails?

This could be a power user toggle, for additional security.

esackbauer

Using 2FA and the mailcow inbuilt Netfilter/Fail2ban usually gets rid of this.
Alias addresses cannot login anyways.

zoomba

esackbauer

Alias addresses cannot login anyways.

I know, I was thinking of having it as a Canary feature. If someone tries to login as an alias that would mean that specific alias is being targeted.

As for netfilter/fail2ban, does that work for smtp/imap?

esackbauer

zoomba As for netfilter/fail2ban, does that work for smtp/imap?

Yes.

ETNyx

99.9% admins do not want be notified when someone failed on login,.. if you need this functionality, you can do it by yourself, for example pass log from MC to Loki and make yourself Alerts in Grafana as you see fit, or use another log solution.

zoomba

ETNyx Sounds good, thanks!