On 12/29/2015 04:42 PM, Michiel Hazelhof wrote: > Hi All, > > I am having some dificulties writing a custom filter, > > Log line: > Dec 29 15:14:36 fyn postfix/postscreen[4034]: DNSBL rank 4 for > [201.132.14.143]:49157 > > My current effort: > > [INCLUDES] > before = common.conf > > [Definition] > _daemon = postfix/smtpd > failregex = ^%(__prefix_line)sDNSBL rank .+ for .*\[<HOST>\].*$ > ignoreregex = > > But it's failing to pickup any ip addresses. > Michiel
The _daemon entry needs to match postfix/postscreen. If you want it to be able to pick up smtpd and postscreen lines, you can use: _daemon = postfix/(smtpd|postscreen) For testing filters, use fail2ban-regex. John ------------------------------------------------------------------------------ _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
