-------- Original Message -------- *Subject: * Re: [Fail2ban-users] fail2ban-regex maches, but fail2ban does not *From: * James Moe Via Fail2ban-users <fail2ban-users@lists.sourceforge.net> *To: * Fail2ban-users <fail2ban-users@lists.sourceforge.net> *CC: * *Date: * 2023-4-22 03:34 PM
failregex = postfix.+ RCPT from unknown\[<HOST>\]\: .+(<badbots>) # Apr 16 11:00:07 datepattern = %%b %%d %%H:%%M:%%S Adding the "RCPT from unknown" portion skips the first []'d number which is not an IP.
That's a good idea. I did not think about that. But still does not work. Wayne Sallee wa...@waynesallee.com http://www.WayneSallee.com _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
