- Added qmail and postfix filters

- Updated vsftpd and couriersmtp

git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@331 a942ae1a-1317-0410-a47c-b1dcaea8d605

MANIFEST

@@ -48,6 +48,8 @@ config/filter.d/vsftpd.conf
 config/filter.d/apache-auth.conf
 config/filter.d/sshd.conf
 config/filter.d/couriersmtp.conf
+config/filter.d/qmail.conf
+config/filter.d/postfix.conf
 config/action.d/iptables.conf
 config/action.d/mail-whois.conf
 config/action.d/dummy.conf

config/filter.d/couriersmtp.conf

@@ -9,6 +9,6 @@
 
 # Option:  failregex
 # Notes.:  regex to match the password failures messages in the logfile.
-# Values:  TEXT  Default:  Authentication failure|Failed password|Invalid user
+# Values:  TEXT  Default:
 #
 failregex = error,relay=(?:::f{4,6}:)?(?P<host>\S*),.*550 User unknown

config/filter.d/postfix.conf

@@ -0,0 +1,14 @@
+# Fail2Ban configuration file
+#
+# Author: Cyril Jaquier
+#
+# $Revision: 267 $
+#
+
+[Definition]
+
+# Option:  failregex
+# Notes.:  regex to match the password failures messages in the logfile.
+# Values:  TEXT  Default:
+#
+failregex = reject: RCPT from (.*)\[(?P<host>\S*)\]: 554

config/filter.d/qmail.conf

@@ -0,0 +1,14 @@
+# Fail2Ban configuration file
+#
+# Author: Cyril Jaquier
+#
+# $Revision: 267 $
+#
+
+[Definition]
+
+# Option:  failregex
+# Notes.:  regex to match the password failures messages in the logfile.
+# Values:  TEXT  Default:
+#
+failregex = (?:[\d,.]+[\d,.] rblsmtpd: |421 badiprbl: ip )(?P<host>\S*)

config/filter.d/vsftpd.conf

@@ -11,4 +11,4 @@
 # Notes.: regex to match the password failures messages in the logfile.
 # Values: TEXT Default: Authentication failure|Failed password|Invalid user
 #
-failregex = FAIL LOGIN
+failregex = vsftpd: \(pam_unix\) authentication failure; .* rhost=(?P<host>\S*)