Match Postfix pre-authentication disconnects

sshguard should parse more errors from postfix. one of the problems i am seeing here is repeated malformed requests like this:

Dec 13 09:32:50 marcos postfix/smtpd[24754]: lost connection after AUTH from rrcs-24-213-217-114.nys.biz.rr.com[24.213.217.114] Dec 13 09:32:50 marcos postfix/smtpd[24754]: disconnect from rrcs-24-213-217-114.nys.biz.rr.com[24.213.217.114] Dec 13 09:32:50 marcos postfix/smtpd[24754]: connect from rrcs-24-213-217-114.nys.biz.rr.com[24.213.217.114] Dec 13 09:32:50 marcos postfix/smtpd[24754]: lost connection after AUTH from rrcs-24-213-217-114.nys.biz.rr.com[24.213.217.114]

about 5-10 times per second, for minutes on end sometimes. this can even fill the logfiles...

it seems this is not recognized by the parser... but I think it should!

Could you check the patch in the following URL: https://bugs.debian.org/807950

Comments (3)