github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

add trigger for postfix/postscreen DNSBL rank message

pull/3545/head
Peter Bieringer 2023-07-24 07:33:12 +02:00
parent 3e6a60f940
commit 0d08faeb32
2 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
config/filter.d/postfix.conf
View File

@ -52,6 +52,10 @@ mdre-aggressive = %(mdre-auth2)s
mdpr-errors = too many errors after \S+ mdpr-errors = too many errors after \S+
mdre-errors = ^from [^[]*\[<HOST>\]%(_port)s$ mdre-errors = ^from [^[]*\[<HOST>\]%(_port)s$
# Extra mode "screendnsbl", triggered on postfix/postscreen[<PID>]: DNSBL rank <NUM> for [<HOST>]:<PORT>
mdpr-screendnsbl = DNSBL rank \d+
mdre-screendnsbl = for \[<HOST>\]%(_port)s
failregex = <mdre-<mode>> failregex = <mdre-<mode>>

10
config/jail.conf
View File

@ -599,6 +599,16 @@ backend = %(postfix_backend)s
maxretry = 1 maxretry = 1
[postfix-screendnbl]
filter = postfix[mode=screendnsbl]
port = smtp,465,submission
logpath = %(postfix_log)s
backend = %(postfix_backend)s
maxretry = 1
bantime = 4h
[sendmail-auth] [sendmail-auth]
port = submission,465,smtp port = submission,465,smtp