mirror of https://github.com/fail2ban/fail2ban
Add to postfix syslog daemon format
parent
3047572701
commit
ff701e94c3
|
@ -10,7 +10,7 @@ before = common.conf
|
|||
|
||||
[Definition]
|
||||
|
||||
_daemon = postfix(-\w+)?/\w+(?:/smtp[ds])?
|
||||
_daemon = postfix(-\w+)?/[^/\[:]+(?:/smtp[ds])?
|
||||
_port = (?::\d+)?
|
||||
_pref = [A-Z]{4}
|
||||
|
||||
|
|
|
@ -154,6 +154,8 @@ Jan 14 16:18:16 xxx postfix/smtpd[14933]: warning: host[192.0.2.5]: SASL CRAM-MD
|
|||
|
||||
# failJSON: { "time": "2005-02-10T13:26:34", "match": true , "host": "192.0.2.1" }
|
||||
Feb 10 13:26:34 srv postfix/smtpd[123]: disconnect from unknown[192.0.2.1] helo=1 auth=0/1 quit=1 commands=2/3
|
||||
# failJSON: { "time": "2005-02-10T13:26:34", "match": true , "host": "192.0.2.1" }
|
||||
Feb 10 13:26:34 srv postfix/smtp-25/smtpd[123]: disconnect from unknown[192.0.2.1] helo=1 auth=0/1 quit=1 commands=2/3
|
||||
# failJSON: { "time": "2005-02-10T13:26:34", "match": true , "host": "192.0.2.2" }
|
||||
Feb 10 13:26:34 srv postfix/smtpd[123]: disconnect from unknown[192.0.2.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
|
||||
|
||||
|
|
Loading…
Reference in New Issue