Hello, i have a problem with fail2-ban 0.8.6. (debian wheezy standard).
I installed fail2ban and activated the postfix jail. for this entry in /var/log/mail.log: Feb 15 15:56:24 servergeek postfix/smtpd[9113]: connect from mf01.rj-v.net[67.3.5.22] Feb 15 15:56:24 servergeek postfix/smtpd[9113]: NOQUEUE: reject: RCPT from mf01.rj-v.net[67.3.5.22]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mf01.rj-v.net> Feb 15 15:56:24 servergeek postfix/smtpd[9113]: disconnect from mf01.rj-v.net[67.3.5.22] i got this message from fail2ban: 2015-02-15 15:56:10,177 fail2ban.filter : WARNING Unable to find a corresponding IP address for ::1 # cat /etc/fail2ban/filter.d/postfix.conf # Fail2Ban configuration file # # Author: Cyril Jaquier # # $Revision$ # [INCLUDES] # Read common prefixes. If any customizations available -- read them from # common.local before = common.conf [Definition] # Option: failregex # Notes.: regex to match the password failures messages in the logfile. The # host must be matched by a group named "host". The tag "<HOST>" can # be used for standard IP/hostname matching and is only an alias for # (?:::f{4,6}:)?(?P<host>[\w\-.^_]+) # Values: TEXT # _daemon = postfix/smtpd failregex = ^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]: 554 5\.7\.1 .*$ # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored. # Values: TEXT # ignoreregex = Is the fail2ban 0.8.6 standard package from debian not longer usable? Thanx Sebastian ------------------------------------------------------------------------------ Dive into the World of Parallel Programming. The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/ _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
