2014-01-05 12:41:49 +00:00
|
|
|
# Fail2ban filter for kerio
|
|
|
|
|
|
|
|
|
|
[Definition]
|
|
|
|
|
|
2014-01-05 22:06:05 +00:00
|
|
|
failregex = ^ SMTP Spam attack detected from <HOST>,
|
2014-01-18 12:18:33 +00:00
|
|
|
^ IP address <HOST> found in DNS blacklist \S+, mail from \S+ to \S+$
|
2014-01-05 22:06:05 +00:00
|
|
|
^ Relay attempt from IP address <HOST>
|
|
|
|
|
^ Attempt to deliver to unknown recipient \S+, from \S+, IP address <HOST>$
|
|
|
|
|
[Init]
|
2014-01-05 12:41:49 +00:00
|
|
|
|
2014-01-20 23:00:38 +00:00
|
|
|
datepattern = ^\[%%d/%%b/%%Y %%H:%%M:%%S\]
|
2014-01-05 12:41:49 +00:00
|
|
|
|
|
|
|
|
# DEV NOTES:
|
|
|
|
|
#
|
|
|
|
|
# Author: A.P. Lawrence
|
|
|
|
|
#
|
|
|
|
|
# Based off: http://aplawrence.com/Kerio/fail2ban.html
|
