Skip to content
Snippets Groups Projects
Commit 62528756 authored by ale's avatar ale
Browse files

Fix example patterns for ipv6

parent 1ae8bc33
No related branches found
No related tags found
No related merge requests found
Pipeline #14927 passed
...@@ -4,23 +4,23 @@ ...@@ -4,23 +4,23 @@
### SSH authentication failures ### SSH authentication failures
# Silly brute-forcers that do not support our kex: # Silly brute-forcers that do not support our kex:
/^Unable to negotiate with ([.0-9]+) port \d+: no matching host key type found./ ssh /^Unable to negotiate with ([.:0-9a-f]+) port \d+: no matching host key type found./ ssh
### Email-related rules ### Email-related rules
# Postscreen failures - protocol errors are (in high volume) characteristic of spammers # Postscreen failures - protocol errors are (in high volume) characteristic of spammers
/^NOQUEUE: reject: RCPT from \[([.0-9]+)\]:\d+: 550 5.5.1 Protocol error;/ spammer /^NOQUEUE: reject: RCPT from \[([.:0-9a-f]+)\]:\d+: 550 5.5.1 Protocol error;/ spammer
# Spammers trying to send email via disabled accounts # Spammers trying to send email via disabled accounts
/^NOQUEUE: reject: RCPT from [^[]+\[(.[0-9]+)\]: 553 5.7.1 <[^>]+>: Sender address rejected: not owned by user/ spammer /^NOQUEUE: reject: RCPT from [^[]+\[([.:0-9a-f]+)\]: 553 5.7.1 <[^>]+>: Sender address rejected: not owned by user/ spammer
# Spammers triggering SPF failures # Spammers triggering SPF failures
/^550 5.7.23 Message rejected due to: SPF fail - not authorized. Please see http:\/\/www.openspf.net\/Why?s=mfrom;id=[^;]*;ip=([.0-9]+);/ spammer /^550 5.7.23 Message rejected due to: SPF fail - not authorized. Please see http:\/\/www.openspf.net\/Why?s=mfrom;id=[^;]*;ip=([.:0-9a-f]+);/ spammer
### Authentication ### Authentication
# General auth-server errors # General auth-server errors
/^auth-server\[\d+\]: auth: user=.* service=smtp status=error ip=([.0-9]+) error=/ auth /^auth-server\[\d+\]: auth: user=.* service=smtp status=error ip=([.:0-9a-f]+) error=/ auth
### Wordpress-specific rules ### Wordpress-specific rules
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment