github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

test cases

pull/4020/head
bill 2025-07-06 23:09:18 -04:00
parent 8e68cbcd19
commit baeaf262e3
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
fail2ban/tests/files/logs/sendmail-reject
View File

@ -94,6 +94,16 @@ Nov 3 11:35:30 Microsoft sendmail[26254]: rA37ZTSC026252: <anton@domain.com>...
# failJSON: { "match": false, "desc": "Different mail ID shouldn't match" }
Nov 3 11:35:30 Microsoft sendmail[26254]: rA37ZTSC026255: from=<anton@domain.com>, size=0, class=0, nrcpts=0, bodytype=8BITMIME, proto=ESMTP, daemon=MTA, relay=163.23.32.95.dsl-dynamic.vsi.ru [95.32.23.163]
# failJSON: { "time": "2024-06-17T13:03:43", "match": true }
Jun 17 13:03:43 <mail.info> alarmpi sm-mta[26864]: 55HH324M026864: from=<foo@example.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
# failJSON: { "time": "2024-06-17T14:37:39", "match": true, "host": "192.168.1.44" }
Jun 17 14:37:39 <mail.notice> alarmpi sm-mta[2794]: 55HIbcGI002794: <baduser@yourhost.com>... User unknown
# failJSON: { "time": "2024-06-17T14:37:39", "match": true, "host": "192.168.1.44" }
Jun 17 14:37:39 <mail.info> alarmpi sm-mta[2794]: 55HIbcGI002794: from=<root@yourhost.com>, size=108, class=0, nrcpts=0, proto=ESMTP, daemon=MTA-v4, relay=yourrelay [192.168.1.44]
# filterOptions: {"mode": "extra"}
# failJSON: { "time": "2005-03-06T16:55:28", "match": true , "host": "192.0.2.194", "desc": "wrong resp. non RFC compiant (ddos prelude?), MTA-mode" }
@ -112,3 +122,12 @@ Mar 29 22:51:43 server sendmail[3529565]: xA32R2PQ3529565: [192.0.2.2] did not i
Mar 29 22:51:45 server sm-mta[50437]: 06QDQnNf050437: example.com [192.0.2.3] did not issue MAIL/EXPN/VRFY/ETRN during connection to IPv4
# failJSON: { "time": "2005-03-29T22:51:46", "match": true , "host": "2001:DB8::1", "desc": "IPv6" }
Mar 29 22:51:46 server sm-mta[50438]: 06QDQnNf050438: example.com [IPv6:2001:DB8::1] did not issue MAIL/EXPN/VRFY/ETRN during connection to IPv6
# aggressive mode # filterOptions: {"mode": "aggressive"}
# failJSON: { "time": "2024-06-17T13:03:43", "match": true, "host": "127.0.0.1" }
Jun 17 13:03:43 <mail.notice> alarmpi sm-mta[26864]: 55HH324M026864: lost input channel from localhost [127.0.0.1] to MTA-v4 after mail
# failJSON: { "time": "2024-06-18T08:05:17", "match": true, "host": "45.125.66.67" }
Jun 18 08:05:17 <mail.notice> myhost sm-mta[17002]: 55IC59VD017002: ruleset=check_rcpt, arg1=<spameri@tiscali.it>, relay=[45.125.66.67], reject=450 4.4.0 <spameri@tiscali.it>... Relaying temporarily denied. Cannot resolve PTR record for 45.125.66.67