[DEFAULT] destemail = whereyouwantto@receiveemail # Change it sender = registered@emailserver # Change it action_blocklist_de = blocklist_de[email="%(sender)s", service=%(filter)s, apikey="%(blocklist_de_apikey)s"] %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"] %(mta)s-whois[name=%(__name__)s, dest="%(destemail)s", protocol="%(protocol)s", chain="%(chain)s"] findtime = 10800 action = %(action_blocklist_de)s blocklist_de_apikey = xXxXxXxXxX # Change with your server API-Key [sshd] enabled = true [sshd-ddos] enabled = true [dropbear] [selinux-ssh] [apache-auth] enabled = true [apache-badbots] enabled = true [apache-noscript] enabled = true [apache-overflows] enabled = true [apache-nohome] enabled = true [apache-botsearch] enabled = true [apache-modsecurity] enabled = true [nginx-http-auth] [php-url-fopen] enabled = true [suhosin] [lighttpd-auth] [roundcube-auth] enabled = true [openwebmail] [horde] [groupoffice] [sogo-auth] [tine20] [guacamole] [monit] [webmin-auth] enabled = true [squid] enabled = true [3proxy] [proftpd] [pure-ftpd] enabled = true [gssftpd] [wuftpd] [vsftpd] [assp] [courier-smtp] [postfix] enabled = true [sendmail-auth] [sendmail-reject] [qmail-rbl] [dovecot] enabled = true [sieve] enabled = true [solid-pop3d] [exim] [exim-spam] [kerio] [courier-auth] [postfix-sasl] enabled = true [perdition] [squirrelmail] [cyrus-imap] [uwimap-auth] [named-refused-udp] [named-refused] [nsd] [asterisk] [freeswitch] [mysqld-auth] enabled = true [recidive] [pam-generic] enabled = true [xinetd-fail] [stunnel] [ejabberd-auth] [counter-strike] [nagios] [oracleims]