Your IP : 10.1.73.149

Current Path : /opt/cpguard/cpglfd/configs/jails.available/
Upload File :
Current File : //opt/cpguard/cpglfd/configs/jails.available/rspamd.yaml

jails:
  - name: "rspamd-block"
    enabled: true
    log_paths:
      - "/var/log/rspamd/rspamd.log" # (Standard path)

    rules:
      # 1. Rspamd Hourly Auth Limit Exceeded (Compromised Account / Spammer)
      # Matches: ... rspamd_task_write_log: ... ip: 1.2.3.4 ... "smtp_auth_limit_hourly" exceeded"
      - regexp: "rspamd_task_write_log: .*\\sip:\\s(?P<ip>\\d+\\.\\d+\\.\\d+\\.\\d+).*\"smtp_auth_limit_hourly\" exceeded\""

      # 2. Rspamd Hard Reject (High Spam Score / Malware)
      # Matches: ... rspamd_task_write_log: ... ip: 1.2.3.4 ... T (reject)
      - regexp: "rspamd_task_write_log: .*ip:\\s(?P<ip>\\d+\\.\\d+\\.\\d+\\.\\d+).*T \\(reject\\)"

    max_retries: 10 
    find_time: "5m"
    ban_time: "1h"

    actions:
      - name: "cpgblock-rspamd"
        ban_command: '/usr/bin/cpgcli ip --temp-block {{.IP}} --reason "Blocked by {{.JailName}} due to more than {{.MaxRetry}} abusive access within {{.FindTime}} seconds" --extra " LogFile: {{.LogPath}} | Reason: {{.LogLine}}"'
        unban_command: "/usr/bin/cpgcli ip --temp-block {{.IP}} --remove"