From: Christian Weiske <cweiske@cweiske.de>
Date: Thu, 14 Dec 2017 08:43:42 +0000 (+0100)
Subject: (no commit message)
X-Git-Url: https://git.cweiske.de/paste/527.git/commitdiff_plain/HEAD?hp=a22c5ce0c3acb6f395893ce87b2ba3d9faee3dad

---

diff --git a/testing.txt b/testing.txt
new file mode 100644
index 0000000..304a681
--- /dev/null
+++ b/testing.txt
@@ -0,0 +1,16 @@
+$ fail2ban-regex /var/log/mail.log /etc/fail2ban/filter.d/postfix.conf 
+
+Running tests
+=============
+
+Use   failregex file : /etc/fail2ban/filter.d/postfix.conf
+Use         log file : /var/log/mail.log
+
+
+Results
+=======
+
+Failregex: 6245 total
+|-  #) [# of hits] regular expression
+|   1) [163] ^\s*(<[^.]+\.[^.]+>)?\s*(?:\S+ )?(?:kernel: \[ *\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?postfix/smtpd(?:\(\S+\))?[\]\)]?:?|[\[\(]?postfix/smtpd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:?)?\s(?:\[ID \d+ \S+\])?\s*NOQUEUE: reject: RCPT from \S+\[<HOST>\]: 554 5\.7\.1 .*$
+|   5) [6082] ^\s*(<[^.]+\.[^.]+>)?\s*(?:\S+ )?(?:kernel: \[ *\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?postfix/smtpd(?:\(\S+\))?[\]\)]?:?|[\[\(]?postfix/smtpd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:?)?\s(?:\[ID \d+ \S+\])?\s*lost connection after AUTH from \S+\[<HOST>\]$