Sendmail
From Fail2ban
Revision as of 11:20, 16 July 2010 by SarahGrape (talk | contribs)
Don't remember where I got the information for this Regex but here is the contents of my sendmail.conf file that has successful banned many IPs from spamming my email server
- Fail2Ban configuration file
- Author:
- $Revision: 0 $
[Definition]
- Option: failregex
- Notes.: regex to match the password failures messages in the logfile. The
- host must be matched by a group named "host". The tag "<HOST>" can
- be used for standard IP/hostname matching and is only an alias for
- (?:::f{4,6}:)?(?P<host>\S+)
- Values: TEXT
failregex = \[<HOST>\] .*to MTA
\[<HOST>\] \(may be forged\) \[<HOST>\], reject.*\.\.\. Relaying denied (User unknown)\n* \[<HOST>\]
- Option: ignoreregex
- Notes.: regex to ignore. If this regex matches, the line is ignored.
- Values: TEXT
ignoreregex =