我想阻止IP地址与fail2ban,如果在postfix邮件日志是行:
SSL_accept error from unknown[xxx.xxx.xxx.xxx]: lost connection
我尝试使用下面的代码在filter.d中创buildfail2ban ssl_error.conf:
failregex = ^%(__prefix_line)sSSL_accept error from \S+\s*\[<HOST>\]: lost connection$
但没有运气:(
摆脱^%(__prefix_line)s部分。 简单地设置
failregex = SSL_accept error from \S+\s*\[<HOST>\]: lost connection