Hi there,I have configured Exim to drop the connection after 3 invalid recipients were tried by the caller.
I now want such failure to be used to ban such bots. The log line that exhibits such behavior looks like follows:
exim[3325805]: H=([3.4.5.6]) [3.4.5.6]:44340 I=[1.2.3.4]:25 F=<[email protected]> rejected RCPT <[email protected]>: Too many invalid recipientsCan someone pls help me by crafting a filter expression that matches such messages?
I understand regexps well, but I must admit I'm very incompetent about the fail2ban expressions... :-(
Many thanks in advance for any help I can get. Kind regards, Ralf
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
