Gecko [ newweb.supercareproducts.com ]

Name	Size	Permission	Date
ignorecommands	[ DIR ]	drwxr-xr-x	2026-04-22 20:14
3proxy.conf	467 B	-rw-r--r--	2023-04-01 14:40
apache-auth.conf	3.15 KB	-rw-r--r--	2023-04-01 14:40
apache-badbots.conf	2.76 KB	-rw-r--r--	2023-04-01 14:40
apache-botsearch.conf	1.24 KB	-rw-r--r--	2023-04-01 14:40
apache-common.conf	1.58 KB	-rw-r--r--	2023-04-01 14:40
apache-fakegooglebot.conf	403 B	-rw-r--r--	2023-04-01 14:40
apache-modsecurity.conf	511 B	-rw-r--r--	2023-04-01 14:40
apache-nohome.conf	596 B	-rw-r--r--	2023-04-01 14:40
apache-noscript.conf	1.22 KB	-rw-r--r--	2023-04-01 14:40
apache-overflows.conf	2.14 KB	-rw-r--r--	2023-04-01 14:40
apache-pass.conf	362 B	-rw-r--r--	2023-04-01 14:40
apache-shellshock.conf	1020 B	-rw-r--r--	2023-04-01 14:40
assp.conf	3.41 KB	-rw-r--r--	2023-04-01 14:40
asterisk.conf	2.33 KB	-rw-r--r--	2023-04-01 14:40
bitwarden.conf	427 B	-rw-r--r--	2023-04-01 14:40
botsearch-common.conf	522 B	-rw-r--r--	2023-04-01 14:40
centreon.conf	307 B	-rw-r--r--	2023-04-01 14:40
common.conf	2.71 KB	-rw-r--r--	2023-04-01 14:40
counter-strike.conf	244 B	-rw-r--r--	2023-04-01 14:40
courier-auth.conf	463 B	-rw-r--r--	2023-04-01 14:40
courier-smtp.conf	512 B	-rw-r--r--	2023-04-01 14:40
cyrus-imap.conf	444 B	-rw-r--r--	2023-04-01 14:40
directadmin.conf	338 B	-rw-r--r--	2023-04-01 14:40
domino-smtp.conf	2.06 KB	-rw-r--r--	2023-04-01 14:40
dovecot.conf	2.58 KB	-rw-r--r--	2023-04-01 14:40
dropbear.conf	1.69 KB	-rw-r--r--	2023-04-01 14:40
drupal-auth.conf	547 B	-rw-r--r--	2023-04-01 14:40
ejabberd-auth.conf	1.54 KB	-rw-r--r--	2023-04-01 14:40
exim-common.conf	534 B	-rw-r--r--	2023-04-01 14:40
exim-spam.conf	2.11 KB	-rw-r--r--	2023-04-01 14:40
exim.conf	2.81 KB	-rw-r--r--	2023-04-01 14:40
freeswitch.conf	1.88 KB	-rw-r--r--	2023-04-01 14:40
froxlor-auth.conf	1.18 KB	-rw-r--r--	2023-04-01 14:40
gitlab.conf	236 B	-rw-r--r--	2023-04-01 14:40
grafana.conf	388 B	-rw-r--r--	2023-04-01 14:40
groupoffice.conf	236 B	-rw-r--r--	2023-04-01 14:40
gssftpd.conf	322 B	-rw-r--r--	2023-04-01 14:40
guacamole.conf	1.41 KB	-rw-r--r--	2023-04-01 14:40
haproxy-http-auth.conf	1.14 KB	-rw-r--r--	2023-04-01 14:40
horde.conf	404 B	-rw-r--r--	2023-04-01 14:40
kerio.conf	938 B	-rw-r--r--	2023-04-01 14:40
lighttpd-auth.conf	459 B	-rw-r--r--	2023-04-01 14:40
mongodb-auth.conf	2.23 KB	-rw-r--r--	2023-04-01 14:40
monit.conf	787 B	-rw-r--r--	2023-04-01 14:40
monitorix.conf	640 B	-rw-r--r--	2023-04-01 14:40
mssql-auth.conf	441 B	-rw-r--r--	2023-04-01 14:40
murmur.conf	927 B	-rw-r--r--	2023-04-01 14:40
mysqld-auth.conf	953 B	-rw-r--r--	2023-04-01 14:40
nagios.conf	400 B	-rw-r--r--	2023-04-01 14:40
named-refused.conf	1.56 KB	-rw-r--r--	2023-04-01 14:40
nginx-bad-request.conf	474 B	-rw-r--r--	2023-04-01 14:40
nginx-botsearch.conf	740 B	-rw-r--r--	2023-04-01 14:40
nginx-http-auth.conf	1.02 KB	-rw-r--r--	2023-04-01 14:40
nginx-limit-req.conf	1.48 KB	-rw-r--r--	2023-04-01 14:40
nsd.conf	779 B	-rw-r--r--	2023-04-01 14:40
openhab.conf	452 B	-rw-r--r--	2023-04-01 14:40
openwebmail.conf	495 B	-rw-r--r--	2023-04-01 14:40
oracleims.conf	1.89 KB	-rw-r--r--	2023-04-01 14:40
pam-generic.conf	947 B	-rw-r--r--	2023-04-01 14:40
perdition.conf	568 B	-rw-r--r--	2023-04-01 14:40
php-url-fopen.conf	891 B	-rw-r--r--	2023-04-01 14:40
phpmyadmin-syslog.conf	278 B	-rw-r--r--	2023-04-01 14:40
portsentry.conf	242 B	-rw-r--r--	2023-04-01 14:40
postfix.conf	3.15 KB	-rw-r--r--	2023-04-01 14:40
proftpd.conf	1.14 KB	-rw-r--r--	2023-04-01 14:40
pure-ftpd.conf	2.35 KB	-rw-r--r--	2023-04-01 14:40
qmail.conf	795 B	-rw-r--r--	2023-04-01 14:40
recidive.conf	1.34 KB	-rw-r--r--	2023-04-01 14:40
roundcube-auth.conf	1.46 KB	-rw-r--r--	2023-04-01 14:40
scanlogd.conf	354 B	-rw-r--r--	2023-04-01 14:40
screensharingd.conf	821 B	-rw-r--r--	2023-04-01 14:40
selinux-common.conf	538 B	-rw-r--r--	2023-04-01 14:40
selinux-ssh.conf	570 B	-rw-r--r--	2023-04-01 14:40
sendmail-auth.conf	790 B	-rw-r--r--	2023-04-01 14:40
sendmail-reject.conf	2.9 KB	-rw-r--r--	2023-04-01 14:40
sieve.conf	371 B	-rw-r--r--	2023-04-01 14:40
slapd.conf	706 B	-rw-r--r--	2023-04-01 14:40
softethervpn.conf	451 B	-rw-r--r--	2023-04-01 14:40
sogo-auth.conf	722 B	-rw-r--r--	2023-04-01 14:40
solid-pop3d.conf	1.07 KB	-rw-r--r--	2023-04-01 14:40
squid.conf	260 B	-rw-r--r--	2023-04-01 14:40
squirrelmail.conf	191 B	-rw-r--r--	2023-04-01 14:40
sshd.conf	7.69 KB	-rw-r--r--	2023-04-01 14:40
stunnel.conf	363 B	-rw-r--r--	2023-04-01 14:40
suhosin.conf	649 B	-rw-r--r--	2023-04-01 14:40
tine20.conf	890 B	-rw-r--r--	2023-04-01 14:40
traefik-auth.conf	2.33 KB	-rw-r--r--	2023-04-01 14:40
uwimap-auth.conf	374 B	-rw-r--r--	2023-04-01 14:40
vsftpd.conf	637 B	-rw-r--r--	2023-04-01 14:40
webmin-auth.conf	444 B	-rw-r--r--	2023-04-01 14:40
wuftpd.conf	520 B	-rw-r--r--	2023-04-01 14:40
xinetd-fail.conf	521 B	-rw-r--r--	2023-04-01 14:40
znc-adminlog.conf	912 B	-rw-r--r--	2023-04-01 14:40
zoneminder.conf	1.12 KB	-rw-r--r--	2023-04-01 14:40

Rename

# Fail2Ban filter for selected Postfix SMTP rejections
#
#

[INCLUDES]

# Read common prefixes. If any customizations available -- read them from
# common.local
before = common.conf

[Definition]

_daemon = postfix(-\w+)?/\w+(?:/smtp[ds])?
_port = (?::\d+)?
_pref = [A-Z]{4}

prefregex = ^%(__prefix_line)s<mdpr-<mode>> <F-CONTENT>.+</F-CONTENT>$

# Extended RE for normal mode to match reject by unknown users or undeliverable address, can be set to empty to avoid this:
exre-user = |[Uu](?:ser unknown|ndeliverable address)

mdpr-auth = warning:
mdre-auth = ^[^[]*\[<HOST>\]%(_port)s: SASL ((?i)LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed:(?! Connection lost to authentication server| Invalid authentication mechanism)
mdre-auth2= ^[^[]*\[<HOST>\]%(_port)s: SASL ((?i)LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed:(?! Connection lost to authentication server)
# todo: check/remove "Invalid authentication mechanism" from ignore list, if gh-1243 will get finished (see gh-1297).

# Mode "rbl" currently included in mode "normal", but if needed for jail "postfix-rbl" only:
mdpr-rbl = %(mdpr-normal)s
mdre-rbl  = ^%(_pref)s from [^[]*\[<HOST>\]%(_port)s: [45]54 [45]\.7\.1 Service unavailable; Client host \[\S+\] blocked\b

# Mode "rbl" currently included in mode "normal" (within 1st rule)
mdpr-more = %(mdpr-normal)s
mdre-more = %(mdre-normal)s

mdpr-extra = (?:%(mdpr-auth)s|%(mdpr-normal)s)
mdre-extra = %(mdre-auth)s
            %(mdre-normal)s

mdpr-aggressive = (?:%(mdpr-auth)s|%(mdpr-normal)s|%(mdpr-ddos)s)
mdre-aggressive = %(mdre-auth2)s
                  %(mdre-normal)s

mdpr-errors = too many errors after \S+
mdre-errors = ^from [^[]*\[<HOST>\]%(_port)s$

failregex = <mdre-<mode>>

# Parameter "mode": more (default combines normal and rbl), auth, normal, rbl, ddos, extra or aggressive (combines all)
# Usage example (for jail.local):
#   [postfix]
#   mode = aggressive
#
#   # or another jail (rewrite filter parameters of jail):
#   [postfix-rbl]
#   filter = postfix[mode=rbl]
#
#   # jail to match "too many errors", related postconf `smtpd_hard_error_limit`:
#   # (normally included in other modes (normal, more, extra, aggressive), but this jail'd allow to ban on the first message)
#   [postfix-many-errors]
#   filter = postfix[mode=errors]
#   maxretry = 1
#
mode = more

ignoreregex =

[Init]

journalmatch = _SYSTEMD_UNIT=postfix.service

# Author: Cyril Jaquier