1

Topic: Fail2ban and iredadmin problem/

==== Required information ====
- iRedMail version (check /etc/iredmail-release):
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
======== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.7 MARIADB edition
- Linux/BSD distribution name and version: Ubuntu 16.04.3 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  MARIADB 10.0.31
- Web server (Apache or Nginx): Apache 2.4.18
- Manage mail accounts with iRedAdmin-Pro? no
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hello,

I just installed iRedAdmin and it's working fine to send and receive email except one thing with fail2ban when i'm accessing iredadmin page.
There is errors when page is loading and each time i'm swithcing page with menu.
IE :
AH01630: client denied by server configuration: /var/www/html/
AH01630: client denied by server configuration: /var/www/html/login
AH01630: client denied by server configuration: /var/www/html/domains, referer: https://www.my.domain/iredadmin/admins
AH01630: client denied by server configuration: /var/www/html/profile, referer: https://www.my.domain/iredadmin/admins

There is nothing in /var/www/html and access to this is denied in my apache conf :
<Directory /var/www/html>
                        Options Indexes FollowSymLinks MultiViews
                        AllowOverride None
                        #Order allow,deny
                        #allow from all
                        Require all denied
                </Directory>

If I change it to Require all granted, no more error and no more ban by fail2ban.

Is there any way to avoid iredadmin trying to read in /var/www/html/ ?

Thank you for you help.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Fail2ban and iredadmin problem/

iRedAdmin doesn't access /var/www/html at all, i'm confused why you got this error.

3

Re: Fail2ban and iredadmin problem/

ZhangHuangbin wrote:

iRedAdmin doesn't access /var/www/html at all, i'm confused why you got this error.

I don't have these errors with awstats and roundcube.
This kind of error AH01630: client denied by server configuration: /var/www/html/profile, referer: https://www.my.domain/iredadmin/admins only appears whith subdirectories of iredadmin.
I didn't change anything in iredadmin conf.

4

Re: Fail2ban and iredadmin problem/

I'm confused too. iRedAdmin source code doesn't access these URLs. No idea right now, sorry. sad