[Fail2ban-users] Asking for help crafting "Exim" filter

[Ralf Bergs]

Hi there,




I now want such failure to be used to ban such bots.

The log line that exhibits such behavior looks like follows:

I have configured Exim to drop the connection after 3 invalid recipients were tried by the caller.

exim[3325805]: H=([3.4.5.6]) [3.4.5.6]:44340 I=[1.2.3.4]:25 F=<u...@example.net> rejected RCPT <anotheru...@example.org>: Too many invalid recipients

Can someone pls help me by crafting a filter expression that matches such messages?

Many thanks in advance for any help I can get.

Kind regards,

Ralf

I understand regexps well, but I must admit I'm very incompetent about the fail2ban expressions... :-(

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users