sebres
87f717e0e0
filter.d/sendmail-reject.conf: fix reverse DNS for ... (gh-3012)
4 years ago
sebres
f0214b3d36
filter.d/sendmail-reject.conf: fixed regex to consider "Connection rate limit exceeded" with different combination of arguments
4 years ago
sebres
07fa9f2912
fixes gh-2787: allow to match `did not issue MAIL/EXPN/VRFY/ETRN during connection` non-anchored with extra mode (default names may deviate);
...
additionally provides common addr-tag for IPv4/IPv6 (`(?:IPv6:<IP6>|<IP4>)`) and test-coverage for IPv6
4 years ago
sebres
0e8a8edb5e
filter.d/sendmail-*.conf: both filters have same `__prefix_line` now (and same RE for ID, 14-20 chars long, optional) + adjusted test cases (gh-2563)
5 years ago
Sergey G. Brester
6c7093c66d
minor amend, refolding branches (SP|SA -> S[PA])
6 years ago
Amir Caspi
ffd5d0db78
Update sendmail-reject.conf
...
On some distros (e.g., CentOS 7), sendmail default config labels port 465 as TLSMTA and port 587 as MSA. Update failregex to reflect. Relevant loglines included in 9e1fa4ff73
6 years ago
sebres
ced9828d04
filter.d/sendmail-reject.conf: fixed gh-2385 for some systems (e. g. CentOS): if only identifier set to `sm-mta` (no unit `sendmail`) for some messages.
6 years ago
Michael Grant
57bc502d5c
Update sendmail-reject.conf
7 years ago
Michael Grant
87520e8008
Sendmail logs IPv6 addresses with the prefix 'IPv6:'. Added (IPv6:)? before all <HOST> regexes to match the IPv6 address (but not the prefix).
7 years ago
Orion Poplawski
84f552881c
Add sendmail journalmatch options
7 years ago
sebres
7e442c5b27
filter.d/sendmail-reject.conf:
...
- rewritten using `prefregex` and used MLFID-related multi-line parsing (by using tag `<F-MLFID>` instead of buffering with `maxlines`);
- optional parameter `mode` introduced: normal (default), extra or aggressive (see sendmail-reject for regex details);
test cases extended
8 years ago
sebres
dd373dba9f
test all config-regexp, that contains greedy catch-all before <HOST>, that is hard-anchored at end or precise sub expression after <HOST>;
...
new ssh rule(s) added:
- Connection reset by peer (multi-line rule during authorization process);
- No supported authentication methods available;
Single line and multi-line expression optimized, added optional prefixes and suffix (logged from several ssh versions);
closes gh-864
8 years ago
sebres
84c3eb3e0e
filter.d/sendmail-reject.conf: double space (should be by missing dns-host only)
...
Closes #1578
8 years ago
Daniel Black
50d938e0bf
MRG: merge filter sendmail-spam into sendmail-reject
11 years ago
Daniel Black
853bed8e4f
ENH: more sendmail-reject filter items thanks to fab23
11 years ago
Daniel Black
d0ec09a3b5
BF: move to right location
11 years ago
Daniel Black
c10cc20928
ENH: rename sendmail-spam to sendmail-reject
11 years ago
Daniel Black
d34569fb8d
BF: email address as arg1 in sendmail filters
11 years ago
Daniel Black
72c84fe9b0
ENH: wider regex for RBL and sendmail-spam
11 years ago
Daniel Black
3d776afbb0
ENH: add filter for sendmail-{auth,spam}. Closes gh-20
11 years ago
Daniel Black
a8a1310098
ENH: sendmail-spam - loose regex on email and domain bits so more likely to match. Added dev notes and author attribution/blame
11 years ago
Daniel Black
cb982ef921
ENH: multiline filter for sendmail-spam. Closes gh-418
11 years ago