Im having problems with the filter not recognising a line in my mail.log, have tried allot of options but the offending login still does not get recognised: folowing is the line in the mail.log file. postfix/smtpd[746975]: warning: unknown[194.169.175.10]: SASL LOGIN authentication failed: (reason unavailable), [email protected] im using standard postfix.conf have also tried postfix-sasl.conf Im not a expert on the regex scripting, please help.
Use tools to test regular expression, there are websites that offer such tools. Search Engines can find them. My signature has link to Fail2ban tutorial. Those authentication failed logins should be detected if you have enabled the postfix jail.