diff options
| author | Kaz Kylheku <kaz@kylheku.com> | 2016-01-13 12:12:31 -0800 |
|---|---|---|
| committer | Kaz Kylheku <kaz@kylheku.com> | 2016-01-13 12:12:31 -0800 |
| commit | 86defc1e3911346cb4b1435980c08c319d58f63a (patch) | |
| tree | 20463be1334538dce5ce5f646ad8c5f82493e88a | |
| parent | 0ff0728bea6642f14e21798ce8563254bb2aa60d (diff) | |
| download | txrban-86defc1e3911346cb4b1435980c08c319d58f63a.tar.gz txrban-86defc1e3911346cb4b1435980c08c319d58f63a.tar.bz2 txrban-86defc1e3911346cb4b1435980c08c319d58f63a.zip | |
Better pattern matches for logs of SMTP intrusions.
| -rw-r--r-- | exim.txr | 6 |
1 files changed, 3 insertions, 3 deletions
@@ -18,13 +18,13 @@ host lookup failed@(skip) @ (bind points 6) @ (end) @ (or) -@nil @nil SMTP protocol synchronization error @(skip)[@ip]@(skip) +@nil @nil SMTP protocol synchronization error @(skip)[@ip]:@(skip) @ (bind points 10) @ (or) -@nil @nil SMTP call from@(skip)[@ip] dropped: too many nonmail@(skip) +@nil @nil SMTP call from (@nil) [@ip] dropped: @(skip) @ (bind points 10) @ (or) -@nil @nil cram_md5_server authenticator failed @(skip)[@ip]@(skip) +@nil @nil cram_md5_server authenticator failed for @(skip)(@nil) [@ip]:@(skip) @ (bind points 10) @ (or) @ (accept continue) |