From b3940f199e11635189c08b3e39eb759b721f259a Mon Sep 17 00:00:00 2001
From: DDATAA <45762540+Ddataa@users.noreply.github.com>
Date: Tue, 20 Dec 2022 10:20:21 +0000
Subject: [PATCH] Create postfix-sasl.conf

---
 conf/fail2ban/postfix-sasl.conf | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 conf/fail2ban/postfix-sasl.conf

diff --git a/conf/fail2ban/postfix-sasl.conf b/conf/fail2ban/postfix-sasl.conf
new file mode 100644
index 000000000..a9f470782
--- /dev/null
+++ b/conf/fail2ban/postfix-sasl.conf
@@ -0,0 +1,6 @@
+# Fail2Ban filter for postfix authentication failures
+[INCLUDES]
+before = common.conf
+[Definition]
+_daemon = postfix/smtpd
+failregex = ^%(__prefix_line)swarning: [-._\w]+\[<HOST>\]: SASL (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(: [ A-Za-z0-9+/]*={0,2})?\s*$