diff --git a/config/filter.d/postfix.conf b/config/filter.d/postfix.conf index 79cea25e..8806ee3d 100644 --- a/config/filter.d/postfix.conf +++ b/config/filter.d/postfix.conf @@ -10,7 +10,7 @@ before = common.conf [Definition] -_daemon = postfix(-\w+)?/\w+(?:/smtp[ds])? +_daemon = postfix(-\w+)?/[^/\[:]+(?:/smtp[ds])? _port = (?::\d+)? _pref = [A-Z]{4} diff --git a/fail2ban/tests/files/logs/postfix b/fail2ban/tests/files/logs/postfix index 7fcb540b..da7f4219 100644 --- a/fail2ban/tests/files/logs/postfix +++ b/fail2ban/tests/files/logs/postfix @@ -154,6 +154,8 @@ Jan 14 16:18:16 xxx postfix/smtpd[14933]: warning: host[192.0.2.5]: SASL CRAM-MD # failJSON: { "time": "2005-02-10T13:26:34", "match": true , "host": "192.0.2.1" } Feb 10 13:26:34 srv postfix/smtpd[123]: disconnect from unknown[192.0.2.1] helo=1 auth=0/1 quit=1 commands=2/3 +# failJSON: { "time": "2005-02-10T13:26:34", "match": true , "host": "192.0.2.1" } +Feb 10 13:26:34 srv postfix/smtp-25/smtpd[123]: disconnect from unknown[192.0.2.1] helo=1 auth=0/1 quit=1 commands=2/3 # failJSON: { "time": "2005-02-10T13:26:34", "match": true , "host": "192.0.2.2" } Feb 10 13:26:34 srv postfix/smtpd[123]: disconnect from unknown[192.0.2.2] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4