github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

Merge ee789c29ea into 86b9adb2f5

pull/3545/merge
Peter Bieringer 2025-06-17 15:19:18 -04:00 committed by GitHub
parent 86b9adb2f5 ee789c29ea
commit 0318d86cec
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
config/filter.d/postfix.conf
View File

@ -52,6 +52,10 @@ mdre-aggressive = %(mdre-auth2)s
mdpr-errors = too many errors after \S+
mdre-errors = ^from [^[]*\[<HOST>\]%(_port)s$
# Extra mode "screendnsbl", triggered on postfix/postscreen[<PID>]: DNSBL rank <NUM> for [<HOST>]:<PORT>
mdpr-screendnsbl = DNSBL rank \d+
mdre-screendnsbl = ^for \[<HOST>\]%(_port)s
failregex = <mdre-<mode>>

10
config/jail.conf
View File

@ -599,6 +599,16 @@ backend = %(postfix_backend)s
maxretry = 1
[postfix-screendnbl]
filter = postfix[mode=screendnsbl]
port = smtp,465,submission
logpath = %(postfix_log)s
backend = %(postfix_backend)s
maxretry = 1
bantime = 4h
[sendmail-auth]
port = submission,465,smtp

9
fail2ban/tests/files/logs/postfix
View File

@ -191,3 +191,12 @@ Jun 8 23:14:54 proxy2 postfix/postscreen[473]: COMMAND COUNT LIMIT from [192.0.
# filterOptions: [{}, {"mode": "ddos"}, {"mode": "aggressive"}]
# failJSON: { "match": false, "desc": "don't affect lawful data (sporadical connection aborts within DATA-phase, see gh-1813 for discussion)" }
Feb 18 09:50:05 xxx postfix/smtpd[42]: lost connection after DATA from good-host.example.com[192.0.2.10]
# ---------------------------------------
# Test-cases of postfix screendnsbl mode:
# ---------------------------------------
# filterOptions: [{"mode": "screendnsbl"}]
# failJSON: { "time": "2023-07-01T03:55:34", "match": true , "host": "192.0.2.30" }
Jul 1 03:55:34 xxx postfix/postscreen[188902]: DNSBL rank 6 for [192.0.2.30]:52340