mirror of https://github.com/fail2ban/fail2ban
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
22 lines
512 B
22 lines
512 B
# Fail2Ban filter to block relay attempts though a Courier smtp server |
|
# |
|
# |
|
|
|
[INCLUDES] |
|
|
|
# Read common prefixes. If any customizations available -- read them from |
|
# common.local |
|
before = common.conf |
|
|
|
[Definition] |
|
|
|
_daemon = courieresmtpd |
|
|
|
prefregex = ^%(__prefix_line)serror,relay=<HOST>,(?:port=\d+,)?<F-CONTENT>.+</F-CONTENT>$ |
|
|
|
failregex = ^[^:]*: 550 User (<.*> )?unknown\.?$ |
|
^msg="535 Authentication failed\.",cmd:( AUTH \S+)?( [0-9a-zA-Z\+/=]+)?(?: \S+)$ |
|
|
|
ignoreregex = |
|
|
|
# Author: Cyril Jaquier
|
|
|