← Back to branch summary

~ubuntu-branches/ubuntu/vivid/fail2ban/vivid

« back to all changes in this revision

Viewing changes to config/filter.d/exim-spam.conf

  • Committer: Package Import Robot
  • Author(s): Yaroslav Halchenko
  • Date: 2014-03-18 23:13:35 UTC
  • mfrom: (1.2.10)
  • Revision ID: package-import@ubuntu.com-20140318231335-zo2ibn1cfrhl6qzn
Tags: 0.8.13-1
* New upstream bug-fix release: but consider 0.9.0 (to be uploaded to
  experimental)
* debian/jail:
  - new jail definitions: apache-modsecurity, apache-nohome, freeswitch,
    ejabberd-auth, ssh-blocklist, nagios
  - new configuration option: ignorecommand
* debian/post{inst,rm},preinst:
  - [thanks to Daniel Schaal]: take care about renaming config files
    - firewall-cmd-direct-new.conf to firewallcmd-new.conf which happened
      in 0.8.11-29-g56b6bf7
    - lighttpd-fastcgi.conf to suhosin.conf and
      sasl.conf to postfix-sasl.conf in the past 0.8.11 release

Show diffs side-by-side

added added

removed removed

Lines of Context:
config/filter.d/exim-spam.conf
1
1
# Fail2Ban filter for exim the spam rejection messages
2
2
#
 
3
## For the SA: Action: silently tossed message... to be logged exim's SAdevnull option needs to be used.
3
4
 
4
5
[INCLUDES]
5
6
 
12
13
failregex =  ^%(pid)s \S+ F=(<>|\S+@\S+) %(host_info)srejected by local_scan\(\): .{0,256}$
13
14
             ^%(pid)s %(host_info)sF=(<>|[^@]+@\S+) rejected RCPT [^@]+@\S+: .*dnsbl.*\s*$
14
15
             ^%(pid)s \S+ %(host_info)sF=(<>|[^@]+@\S+) rejected after DATA: This message contains a virus \(\S+\)\.\s*$
 
16
             ^%(pid)s \S+ SA: Action: silently tossed message: score=\d+\.\d+ required=\d+\.\d+ trigger=\d+\.\d+ \(scanned in \d+/\d+ secs \| Message-Id: \S+\)\. From \S+ \(host=(\S+ )?\[<HOST>\]\) for \S+$
15
17
 
16
18
ignoreregex = 
17
19