Mercurial > logstash
diff dnsbl.pattern @ 5:6b7beb807d14
add dnsbl patterns
author | Carl Byington <carl@five-ten-sg.com> |
---|---|
date | Fri, 22 Mar 2013 10:31:48 -0700 |
parents | |
children |
line wrap: on
line diff
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/dnsbl.pattern Fri Mar 22 10:31:48 2013 -0700 @@ -0,0 +1,6 @@ +DNSBL1 %{SYSLOGBASE} %{QID:qid}: from <%{EMAIL:from}> to <%{EMAIL:to}> using context %{DATA:context} state %{DATA:state} reply context %{DATA:replycontext} state %{DATA:replystate} +DNSBL2 %{SYSLOGBASE} %{QID:qid}: spamc returned %{GREEDYDATA:spamassassin} +DNSBL3 %{SYSLOGBASE} %{QID:qid}: dcc returned %{GREEDYDATA:dcc} +DNSBL4 %{SYSLOGBASE} %{QID:qid}: Milter: to=<%{EMAIL:to}>, reject=%{DATA:smtpreason} mail from %{IP:ip} rejected - %{GREEDYDATA:dnsblreason} + +DNSBL (%{DNSBL1}|%{DNSBL2}|%{DNSBL3}|%{DNSBL4})