Currently, DenyHosts only looks at a single log file. If exim is logging to a different file than ssh then it won't work. If the exim entries are logged (or you reconfigure it to log) to the same log file then you can add a custom regex to your denyhost.cfg file:
USERDEF_FAILED_ENTRY_REGEX=H=\(\[(?P<name>\d*\.\d*\.\d*\.\d*)\]\).*?F=<(?P<user>.*?)@.*?rejected RCPT.*?blacklisted Regards, Phil On Wed, 28 Oct 2009, apm wrote: > Hello, i build exim from tcp_wrappers and use BLOCK_SERVICE=ALL, thats > prevent blocked hosts access to exim. > > But its only 50% of success ;) > How i can add now hosts from parsing exim log file? > In my log file i have such records* > > 2009-10-28 20:41:02 H=([190.5.245.10]) [190.5.245.10] > F=<[email protected]> rejected RCPT <[email protected]>: "blacklisted - > cbl.abuseat.org" > 2009-10-28 20:41:03 H=([190.5.245.10]) [190.5.245.10] > F=<[email protected]> rejected RCPT <[email protected]>: "blacklisted > - cbl.abuseat.org" > 2009-10-28 20:41:08 no host name found for IP address 190.5.245.10 > 2009-10-28 20:41:09 H=([190.5.245.10]) [190.5.245.10] > F=<[email protected]> rejected RCPT <[email protected]>: "blacklisted - > cbl.abuseat.org > > Is it possible detect that H=(...)[190.5.245.10] was blacklisted 3 > times in one min and add to hosts.deny > ALL: 190.5.245.10 : deny ? > > I dont want start exim for such connects. > > Thanks. > > ------------------------------------------------------------------------------ > Come build with us! The BlackBerry(R) Developer Conference in SF, CA > is the only developer event you need to attend this year. Jumpstart your > developing skills, take BlackBerry mobile applications to market and stay > ahead of the curve. Join us from November 9 - 12, 2009. Register now! > http://p.sf.net/sfu/devconference > _______________________________________________ > Denyhosts-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/denyhosts-user > ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Denyhosts-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/denyhosts-user
