mirror of https://github.com/fail2ban/fail2ban
`filter.d/postfix.conf` - default `_daemon` in prefix-line is loosened - can match everything starting with word postfix, like `postfix-example.com/smtpd`;
closes gh-3297pull/3965/head
parent
505d51fd5d
commit
8ae6eaf39a
|
@ -27,7 +27,9 @@ ver. 1.1.1-dev-1 (20??/??/??) - development nightly edition
|
|||
* `filter.d/freeswitch.conf` - bypass some new info in prefix before [WARNING] (changed default `_pref_line`),
|
||||
FreeSWITCH log line prefix has changed in newer versions (gh-3143)
|
||||
* `filter.d/lighttpd-auth.conf` - fixed regex (if failures generated by systemd-journal), bypass several prefixes now (gh-3955)
|
||||
* `filter.d/postfix.conf` - consider CONNECT and other rejected commands as a valid `_pref` (gh-3800)
|
||||
* `filter.d/postfix.conf`:
|
||||
- consider CONNECT and other rejected commands as a valid `_pref` (gh-3800)
|
||||
- default `_daemon` in prefix-line is loosened - can match everything starting with word postfix, like `postfix-example.com/smtpd` (gh-3297)
|
||||
* `filter.d/dropbear.conf`:
|
||||
- recognizes extra pid/timestamp if logged into stdout/journal, added `journalmatch` (gh-3597)
|
||||
- failregex extended to match different format of "Exit before auth" message (gh-3791)
|
||||
|
|
|
@ -10,7 +10,7 @@ before = common.conf
|
|||
|
||||
[Definition]
|
||||
|
||||
_daemon = postfix(-\w+)?/[^/\[:\s]+(?:/smtp[ds])?
|
||||
_daemon = postfix\b([^\[\s]+)?
|
||||
_port = (?::\d+)?
|
||||
_pref = [A-Z]{4,}
|
||||
|
||||
|
|
Loading…
Reference in New Issue