could you please confirm that postfix failregex mentioned in filters.d/postfix ie reject: RCPT from (.*)\[<HOST>\]: 554
is the one adherent to mail.log whenever postfix is logging into it? On Thu, 28 Dec 2006, Jefferson Cowart wrote: > Package: fail2ban > Version: 0.7.5-2 > Severity: normal > By default the postfix log looks at /var/log/postfix.log. By default > postfix logs to /var/log/mail.log. (The other two mail server entries properly > look at /var/log/mail.log.) -- .-. =------------------------------ /v\ ----------------------------= Keep in touch // \\ (yoh@|www.)onerussian.com Yaroslav Halchenko /( )\ ICQ#: 60653192 Linux User ^^-^^ [175555] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]