thanks steven, after reading a few threads on the topic, seems to default behaviour of postfix is now 454 instead of 554.  Is there any reason it would be preferable to change the postfix config to permanent rejections rather than just add the regex as I described?

In either case, shouldn't the fail2ban regex be amended regardless since the many of current postfix installations no longer default to 554?


On Sat, Jul 5, 2014 at 12:43 PM, Steven Hiscocks <steven-fail2ban.users@hiscocks.me.uk> wrote:
Hi Billy,

There is a regex already which matches these sort of log lines, but for permanent rejection (554 5.7.1). Your rejections are defer "try again later" (454 4.7.1). You may prefer to check your postfix configuration to make relay attempts  permanent rejections.


On 5 July 2014 16:43:41 BST, billy noah <billynoah@gmail.com> wrote:
>I've come up with this as a slight mod from the current postfix jail:
>
>^%(__prefix_line)sNOQUEUE: reject: RCPT from \S+\[<HOST>\]: 454 4\.7\.1
>:*$
>
>
>How to include the "Relay access denied" portion in the regex?  Sorry -
>regex still mystifies me.
>
>
>On Sat, Jul 5, 2014 at 11:37 AM, billy noah <billynoah@gmail.com>
>wrote:
>
>> Got a ton of these in my mail.log:
>>
>> Jul  3 20:03:17 example postfix/smtpd[9575]: NOQUEUE: reject: RCPT
>from
>> netsol.outbound.ed10.com[208.94.20.67]: 454 4.7.1
><admin@example.com>:
>> Relay access denied; from=<
>>
>V6P6-OONY4-99LFU-MBYOCY-90KJ1-M-M2-20140703-841ceff4f3b9eaedbb@netsol.bounce.ed10.net>
>> to=<admin@example.com> proto=ESMTP helo=<netsol.outbound.ed10.com>
>>
>> Is there a jail setting or custom filter in existence to handle
>these?  If
>> not, could someone get me started on one?
>>
>>
>>
>
>
>------------------------------------------------------------------------
>
>------------------------------------------------------------------------------
>Open source business process management suite built on Java and Eclipse
>Turn processes into business applications with Bonita BPM Community
>Edition
>Quickly connect people, data, and systems into organized workflows
>Winner of BOSSIE, CODIE, OW2 and Gartner awards
>http://p.sf.net/sfu/Bonitasoft
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Fail2ban-users mailing list
>Fail2ban-users@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/fail2ban-users

--
Steven Hiscocks

------------------------------------------------------------------------------
Open source business process management suite built on Java and Eclipse
Turn processes into business applications with Bonita BPM Community Edition
Quickly connect people, data, and systems into organized workflows
Winner of BOSSIE, CODIE, OW2 and Gartner awards
http://p.sf.net/sfu/Bonitasoft
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users