fail2ban – 从mail.log阻止“SSL_accept错误来自”

我想阻止IP地址与fail2ban,如果在postfix邮件日志是行:

SSL_accept error from unknown[xxx.xxx.xxx.xxx]: lost connection 

我尝试使用下面的代码在filter.d中创buildfail2ban ssl_error.conf:

 failregex = ^%(__prefix_line)sSSL_accept error from \S+\s*\[<HOST>\]: lost connection$ 

但没有运气:(

摆脱^%(__prefix_line)s部分。 简单地设置

 failregex = SSL_accept error from \S+\s*\[<HOST>\]: lost connection