Hi all,
I have updated my fail2ban installation to Fail2Ban v0.10.2 and I have some
questions regarding the mode in the postfix filter:
- Do I have to set the mode in both jail.local and filter.d/postfix.conf?
- Does the mode in jail.local have to match with the one in
filter.d/postfix.conf?
- What does mdre mean? And mdpr?
Right now, I have the following configuration in jail.local:
------
[postfix]
enabled = true
mode = aggressive
port = smtp,ssmtp
filter = postfix
logpath = /var/log/mail.log
findtime = 3600
bantime = 7200
------
and this one in filter.d/postfix.conf:
------
failregex = <mdre-<mode>>
# Parameter "mode": more (default combines normal and rbl), auth, normal,
rbl, ddos, extra or aggressive (combines all)
# Usage example (for jail.local):
# [postfix]
# mode = aggressive
# # or another jail (rewrite filter parameters of jail):
# [postfix-rbl]
# filter = postfix[mode=rbl]
#
# mode = more
mode = aggressive
------
If I don't set a value for mode in filter.d/postfix.conf, fail2ban fails
with 'Error: Received RegexException("No failure-id group in
'<mdre-<mode>>'" but from the commented out part in that file I get the
idea that I have to set a value for mode in jail.local, and at that point
is where I don't know what is the right way.
If this is documented somewhere, please feel free to point me to it,
because I have not found anything. I have downloaded the latest fail2ban
(0.11) and the filter.d/postfix.conf file contains the same commented out
part.
Thank you so much!
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
