tibbs / rpms / fail2ban

Forked from rpms/fail2ban 5 years ago
Clone
Blob Blame History Raw
diff -up fail2ban-0.10.0/config/filter.d/sendmail-auth.conf.sendmail fail2ban-0.10.0/config/filter.d/sendmail-auth.conf
--- fail2ban-0.10.0/config/filter.d/sendmail-auth.conf.sendmail	2017-09-20 20:01:34.624748219 -0600
+++ fail2ban-0.10.0/config/filter.d/sendmail-auth.conf	2017-09-20 20:02:56.902880330 -0600
@@ -7,7 +7,7 @@ before = common.conf
 
 [Definition]
 
-_daemon = (?:sm-(mta|acceptingconnections))
+_daemon = (?:sendmail|sm-(?:mta|acceptingconnections))
 
 failregex = ^%(__prefix_line)s\w{14}: (\S+ )?\[<HOST>\]( \(may be forged\))?: possible SMTP attack: command=AUTH, count=\d+$