github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

add optional regex for 450 errors (bad/no PTR) 

Extpression matches these lines:

Jun 18 08:05:17 <mail.notice> myhost sm-mta[17002]: 55IC59VD017002: ruleset=check_rcpt, arg1=<spameri@tiscali.it>, relay=[45.125.66.67], reject=450 4.4.0 <spameri@tiscali.it>... Relaying temporarily denied. Cannot resolve PTR record for 45.125.66.67
Jun 18 08:39:01 <mail.notice> myhost sm-mta[18321]: 55ICcxnU018321: ruleset=check_rcpt, arg1=<spameri@tiscali.it>, relay=[45.125.66.67], reject=450 4.4.0 <spameri@tiscali.it>... Relaying temporarily denied. Cannot resolve PTR record for 45.125.66.67
Jun 19 15:57:25 <mail.notice> myhost sm-mta[1995]: 55JJvOSJ001995: ruleset=check_rcpt, arg1=<spameri@tiscali.it>, relay=[165.154.217.238], reject=450 4.4.0 <spameri@tiscali.it>... Relaying temporarily denied. Cannot resolve PTR record for 165.154.217.238
Signed-off-by: bill <git@billforsyth.net>
pull/4020/head
Bill Forsyth 2025-06-26 23:46:10 -04:00 committed by bill
parent 8fe2697a34
commit 8e68cbcd19
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
config/filter.d/sendmail-reject.conf
View File

@ -36,6 +36,7 @@ mdre-normal =
mdre-extra = ^(?:\S+ )?\[<ADDR>](?: \(may be forged\))? did not issue \S+ during connection
mdre-aggressive = ^lost input channel from (\S+ )?\[<ADDR>\] to MTA(?:-v[46])? after (rcpt|mail)$
^ruleset=check_rcpt, arg1=(?P<email><\S+@\S+>), relay=(\S+ )?\[<ADDR>\](?: \(may be forged\))?, reject=(?:450 4\.4\.0(?: (?P=email)\.\.\.)?(?: Relaying temporarily denied\.)?(?: Cannot resolve PTR record for (\d+\.){3}\d+))$
%(mdre-extra)s
failregex = %(cmnfailre)s