Talk:Postfix

From Fail2ban
Jump to: navigation, search

A better regex, for capturing all 5xx (fatal) reject codes?

# regex to match reject codes beginning with 5 (fatal), 
# then digits 0 or 5, and then 0-4
# eg. 500, 502, 504, 550, 551, 553...
failregex = reject: RCPT from (.*)\[<HOST>\]: 5[05][0-4]

I don't like blocking 4xx (try again) errors, but the regex could easily incorporate that too:

failregex = reject: RCPT from (.*)\[<HOST>\]: [45][05][0-4]

--Trix