more filter.d/postfixconf help needed.
I have a log entry in maillog I am trying trigger fail2ban with. I
actually want to trigger on anything with the following
after EHLO from unknown[xxx.xxx.xxx.xxx]
May 5 18:58:24 mail postfix/smtpd[3984]: lost connection after EHLO
from unknown[141.98.80.48]
May 6 03:08:17 mail postfix/smtpd[29346]: lost connection after EHLO
from unknown[78.128.113.100]
May 7 03:12:05 mail postfix/smtpd[10156]: lost connection after EHLO
from unknown[185.50.149.26]
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
