No one?

From: Dudi Goldenberg [mailto:d...@kolcore.com]
Sent: Wednesday, December 02, 2015 7:59
To: fail2ban-users@lists.sourceforge.net
Subject: [Fail2ban-users] [SPAM] Postfix j-chkmail milter rejects

Hello list,

Sorry for the resend if the previous post did make the list - I didn't get it.

Can anyone help writing a filter for a postfix milter reject log?

The reject comes from j-chkmail, reject reasons may vary, here are some 
examples:

Nov 26 11:25:59 mail postfix/smtpd[26033]: NOQUEUE: milter-reject: CONNECT from 
unknown[203.255.53.138]: 421 4.5.1 Too many open connections; proto=SMTP
Nov 29 20:40:11 mail postfix/smtpd[27473]: NOQUEUE: milter-reject: CONNECT from 
unknown[82.144.250.140]: 421 4.5.1 Connection Rate; proto=SMTP
Nov 30 08:06:11 mail postfix/smtpd[26292]: NOQUEUE: milter-reject: CONNECT from 
unknown[unknown]: 421 4.5.1 Can't get your IP address. Try again later !; 
proto=SMTP
Nov 30 21:28:58 mail postfix/cleanup[9133]: 7DA6AD61A0: milter-reject: 
END-OF-MESSAGE from mail-wm0-f48.google.com[74.125.82.48]: 5.7.1 Date in the 
future ???; from=<talp...@gmail.com<mailto:talp...@gmail.com>> 
to=<mo...@med-trix.com<mailto:mo...@med-trix.com>> proto=ESMTP 
helo=<mail-wm0-f48.google.com>
Dec  1 14:34:37 mail postfix/smtpd[7883]: NOQUEUE: milter-reject: MAIL from 
unknown[85.25.194.116]: 421 4.5.1 Unreacheable domain. Try again later !; 
from=<nore...@investmentreply.info<mailto:nore...@investmentreply.info>> 
proto=ESMTP helo=<investmentreply.info>

Maybe looking for milter-reject should to the job.

My goal is to add it to postfix.conf filter.

TIA

Dudi

------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to