configuration-templates – Blame information for rev 92

Subversion Repositories:
Rev:
Rev Author Line No. Line
92 office 1 # Fail2Ban filter for selected Postfix SMTP rejections
2 #
3 #
4  
5 [INCLUDES]
6  
7 # Read common prefixes. If any customizations available -- read them from
8 # common.local
9 before = common.conf
10  
11 [Definition]
12  
13 _daemon = postfix(-\w+)?/(?:submission/|smtps/)?smtp[ds]
14  
15 failregex = ^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]: 554 5\.7\.1 .*$
16 ^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]: .* Client host rejected: cannot find your hostname, (\[\S*\]); from=<\S*> to=<\S+> proto=E?SMTP helo=<\S*>$
17 ^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]: .* Helo command rejected: Host not found .*$
18 ^%(__prefix_line)sNOQUEUE: reject: EHLO from \S+\[<HOST>\]: .* <\S+>: Helo command rejected: need fully-qualified hostname;.*$
19 ^%(__prefix_line)sNOQUEUE: reject: VRFY from \S+\[<HOST>\]: .*$
20 ^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]: .* <\S*>: Sender address rejected: Domain not found; from=<\S*> to=<\S+> proto=E?SMTP helo=<\S*>$
21 ^%(__prefix_line)simproper command pipelining after \S+ from \[<HOST>\]:.*$
22 ^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]: .* Service unavailable; Client host \[\S+\] blocked using .* from=<\S*> to=<\S+> proto=ESMTP helo=<\S*>$
23  
24 ignoreregex =
25  
26 [Init]
27  
28 journalmatch = _SYSTEMD_UNIT=postfix.service
29  
30 # Author: Cyril Jaquier
31 # Author: Wizardry and Steamworks