-------- Original Message -------- *Subject: * Re: [Fail2ban-users] fail2ban-regex maches, but fail2ban does not *From: * James Moe Via Fail2ban-users <[email protected]> *To: * Fail2ban-users <[email protected]> *CC: * *Date: * 2023-4-22 03:34 PM
failregex = postfix.+ RCPT from unknown\[<HOST>\]\: .+(<badbots>) # Apr 16 11:00:07 datepattern = %%b %%d %%H:%%M:%%S Adding the "RCPT from unknown" portion skips the first []'d number which is not an IP.
That's a good idea. I did not think about that. But still does not work. Wayne Sallee [email protected] http://www.WayneSallee.com _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
