fail2ban/config/filter.d/exim-common.conf

# Fail2Ban configuration file for exim
#
# Author:  Daniel Black
#

[INCLUDES]

# Load customizations if any available
#
after = exim-common.local

[Definition]

# From exim source code: ./src/receive.c:add_host_info_for_log
host_info = H=([\w.-]+ )?(\(\S+\) )?\[<HOST>\](:\d+)? (I=\[\S+\]:\d+ )?(U=\S+ )?(P=e?smtp )?
pid = ( \[\d+\])?