From: Adam D. Barratt Date: Mon, 14 Oct 2019 20:24:38 +0000 (+0100) Subject: fail2ban: (strictly) ban hosts that are well over the ratelimit X-Git-Url: https://git.adam-barratt.org.uk/?p=mirror%2Fdsa-puppet.git;a=commitdiff_plain;h=e7a479b33775f5411f3eba6ef772de8e0fbf726e fail2ban: (strictly) ban hosts that are well over the ratelimit Signed-off-by: Adam D. Barratt --- diff --git a/modules/fail2ban/files/filter/dsa-exim-strict.conf b/modules/fail2ban/files/filter/dsa-exim-strict.conf index 2dcdfb1bd..02eeb0680 100644 --- a/modules/fail2ban/files/filter/dsa-exim-strict.conf +++ b/modules/fail2ban/files/filter/dsa-exim-strict.conf @@ -5,3 +5,4 @@ before = exim-common.conf [Definition] failregex = (?i)^%(pid)s SMTP protocol error in "AUTH LOGIN" %(host_info)sAUTH command used when not advertised$ + ^%(pid)s %(host_info)sWarning: Sender rate \d{3,}.\d / [^ ]+ \(limit: \d\d?\)