|
|
|
@ -2,12 +2,13 @@
|
|
|
|
|
|
|
|
|
|
[Definition]
|
|
|
|
|
|
|
|
|
|
failregex = ^\[\] SMTP Spam attack detected from <HOST>,
|
|
|
|
|
^\[\] IP address <HOST> found in DNS blacklist \S+( \S+), mail from \S+$
|
|
|
|
|
^\[\] Relay attempt from IP address <HOST>
|
|
|
|
|
^\[\] Attempt to deliver to unknown recipient \S+, from \S+, IP address <HOST>$
|
|
|
|
|
failregex = ^ SMTP Spam attack detected from <HOST>,
|
|
|
|
|
^ IP address <HOST> found in DNS blacklist \S+( \S+), mail from \S+$
|
|
|
|
|
^ Relay attempt from IP address <HOST>
|
|
|
|
|
^ Attempt to deliver to unknown recipient \S+, from \S+, IP address <HOST>$
|
|
|
|
|
[Init]
|
|
|
|
|
|
|
|
|
|
datepattern = %d/%b/%Y %H:%M:%S
|
|
|
|
|
datepattern = ^[%%d/%%b/%%Y %%H:%%M:%%S]
|
|
|
|
|
|
|
|
|
|
# DEV NOTES:
|
|
|
|
|
#
|
|
|
|
|