Please ignore my previous mail. I learned a little bit of regular-expressions 
and created a filter for amavisd-new. It is copied below, if it is of any use 
to anyone.
[INCLUDES]before = common.conf[Definition]_daemon = (amavis|amavisd)failregex = 
^%(__prefix_line)s(.*) Blocked BANNED .* \[<HOST>\] .*$ ^%(__prefix_line)s(.*) 
Blocked SPAM .* \[<HOST>\] .*$ ^%(__prefix_line)s(.*) Blocked BAD.* \[<HOST>\] 
.*$ignoreregex = [Init]journalmatch = _SYSTEMD_UNIT=amavisd.service
Thanks,Matt Simon


 
      From: Mathew Simon <[email protected]>
 To: "[email protected]" 
<[email protected]> 
 Sent: Friday, March 11, 2016 7:39 PM
 Subject: Filter for Amavisd-New
   
 Hello,
I use fail2ban for managing the attacks to SSHD.
I was wondering whether a filter exist for Amavisd-New, for managing the 
spamers. I see filters exist for most softwares, but a filter does notexist for 
Amavisd or amavisd-new.
I am not familiar with regular expressions. Any help to find a filter for 
amavisd-new will be appreciated.
Regards,Matt Simon 
 


 

   
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785111&iu=/4140
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to