Set higher IDS block level to avaoid false positives until we have a comple...

Till Brehm

2014-08-25 f9529b330f229fd845fe4f11d612610a84888de1

1
2
3
[Definition]
failregex = (?: pop3-login|imap-login): .*(?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.*
ignoreregex =