Ubuntu
fail2ban package

  1. Bug #1656856
  2. Comment #5

Comment 5 for bug 1656856

Revision history for this message
ñull (erniecom) wrote :

on 18.04 LTS this is still an issue. mail.warn just does not include all the intrusion attempts making it complicated to jail them. An example is on of the default filter rules:

^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]: 554 5\.7\.1 .*$

It simply does not appear in mail.warn but it does in mail.log .

What would be a work around in stead of waiting for a fix?