Details |
Last modification |
View Log
| RSS feed
| Rev |
Author |
Line No. |
Line |
| 34 |
- |
1 |
# Fail2ban filter for kerio
|
|
|
2 |
|
|
|
3 |
[Definition]
|
|
|
4 |
|
|
|
5 |
failregex = ^ SMTP Spam attack detected from <HOST>,
|
|
|
6 |
^ IP address <HOST> found in DNS blacklist \S+, mail from \S+ to \S+$
|
|
|
7 |
^ Relay attempt from IP address <HOST>
|
|
|
8 |
^ Attempt to deliver to unknown recipient \S+, from \S+, IP address <HOST>$
|
|
|
9 |
|
|
|
10 |
ignoreregex =
|
|
|
11 |
|
|
|
12 |
[Init]
|
|
|
13 |
|
|
|
14 |
datepattern = ^\[%%d/%%b/%%Y %%H:%%M:%%S\]
|
|
|
15 |
|
|
|
16 |
# DEV NOTES:
|
|
|
17 |
#
|
|
|
18 |
# Author: A.P. Lawrence
|
|
|
19 |
#
|
|
|
20 |
# Based off: http://aplawrence.com/Kerio/fail2ban.html
|