From c2bcdbe4e4d78e352eb228cfa6d1e34d488a7381 Mon Sep 17 00:00:00 2001 From: bill Date: Sun, 20 Jul 2025 21:36:20 -0400 Subject: [PATCH] remove the host ip from this match because it is not present in the current log line, but cached from prior mlfid --- fail2ban/tests/files/logs/sendmail-reject | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fail2ban/tests/files/logs/sendmail-reject b/fail2ban/tests/files/logs/sendmail-reject index 5f604ca7..b2d38d7a 100644 --- a/fail2ban/tests/files/logs/sendmail-reject +++ b/fail2ban/tests/files/logs/sendmail-reject @@ -97,7 +97,7 @@ Nov 3 11:35:30 Microsoft sendmail[26254]: rA37ZTSC026255: from= alarmpi sm-mta[26864]: 55HH324M026864: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA-v4, relay=localhost [127.0.0.1] -# failJSON: { "time": "2024-06-17T14:37:39", "match": true, "host": "192.168.1.44" } +# failJSON: { "time": "2024-06-17T14:37:39", "match": true, "desc": "match user uknown. host is cached from prior mlfid" } Jun 17 14:37:39 alarmpi sm-mta[2794]: 55HIbcGI002794: ... User unknown # failJSON: { "time": "2024-06-17T14:37:39", "match": false, "host": "192.168.1.44", "desc": "no failure, just cache host for mlfid" }