From da3c8a6fc1162ec587944ef9f8aa29d753151d89 Mon Sep 17 00:00:00 2001
From: Christian Weiske <cweiske@cweiske.de>
Date: Thu, 14 Dec 2017 09:43:42 +0100
Subject: [PATCH]

---
 testing.txt | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 testing.txt

diff --git a/testing.txt b/testing.txt
new file mode 100644
index 0000000..304a681
--- /dev/null
+++ b/testing.txt
@@ -0,0 +1,16 @@
+$ fail2ban-regex /var/log/mail.log /etc/fail2ban/filter.d/postfix.conf 
+
+Running tests
+=============
+
+Use   failregex file : /etc/fail2ban/filter.d/postfix.conf
+Use         log file : /var/log/mail.log
+
+
+Results
+=======
+
+Failregex: 6245 total
+|-  #) [# of hits] regular expression
+|   1) [163] ^\s*(<[^.]+\.[^.]+>)?\s*(?:\S+ )?(?:kernel: \[ *\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?postfix/smtpd(?:\(\S+\))?[\]\)]?:?|[\[\(]?postfix/smtpd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:?)?\s(?:\[ID \d+ \S+\])?\s*NOQUEUE: reject: RCPT from \S+\[<HOST>\]: 554 5\.7\.1 .*$
+|   5) [6082] ^\s*(<[^.]+\.[^.]+>)?\s*(?:\S+ )?(?:kernel: \[ *\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?postfix/smtpd(?:\(\S+\))?[\]\)]?:?|[\[\(]?postfix/smtpd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:?)?\s(?:\[ID \d+ \S+\])?\s*lost connection after AUTH from \S+\[<HOST>\]$
-- 
2.30.2