* filters/postfix.preg

filters/postfix-postscreen.preg

@@ -0,0 +1,6 @@
+# set: defscore=3
+PREGREET [[:digit:]]+ after [[:digit:]]+ from \[<HOST>\]:[[:digit:]]+
+BARE NEWLINE from \[<HOST>\]:[[:digit:]]+
+COMMAND PIPELINING from \[<HOST>\]:[[:digit:]]+
+NON-SMTP COMMAND from \[<HOST>\]:[[:digit:]]+ after CONNECT
+HANGUP after [0-9\.]+ from \[<HOST>\]:[[:digit:]]+ in tests before SMTP handshake

filters/postfix.preg

@@ -2,11 +2,14 @@
 NOQUEUE: reject: RCPT from [[:print:]]+\[<HOST>\]: 454 4\.7\.1 Service unavailable; Client host \[[[:print:]]+\] blocked
 NOQUEUE: reject: RCPT from [[:print:]]+\[<HOST>\]: 454 4\.7\.1 <[[:print:]]+>: Relay access denied
 NOQUEUE: reject: RCPT from [[:print:]]+\[<HOST>\]: 554 5\.7\.1 <[[:print:]]+>: Relay access denied
-NOQUEUE: reject: RCPT from [[:print:]]+\[<HOST>\]: 550 5\.1\.1 <[[:print:]]+>: Recipient address rejected: undeliverable address
+NOQUEUE: reject: RCPT from [[:print:]]+\[<HOST>\]: 554 5\.7\.1 <[[:print:]]+>: Helo command rejected: Access denied
 warning: [[:print:]]+\[<HOST>\]: SASL [A-Z0-9-]+ authentication failed
 # set: defscore=5
+NOQUEUE: reject: RCPT from [[:print:]]+\[<HOST>\]: 550 5\.1\.1 <[[:print:]]+>: Recipient address rejected: undeliverable address
+NOQUEUE: reject: RCPT from [[:print:]]+\[<HOST>\]: 550 5\.1\.1 <[[:print:]]+>: Recipient address rejected: User unknown
 NOQUEUE: reject: RCPT from [[:print:]]+\[<HOST>\]: 504 5\.5\.2 <[[:print:]]+>: Helo command rejected: need fully-qualified hostname
 lost connection after AUTH from [[:print:]]+\[<HOST>\]
 # set: defscore=2
+NOQUEUE: reject: RCPT from [[:print:]]+\[<HOST>\]: 450 4\.7\.1 <[[:print:]]+r>: Unverified Client host rejected
 NOQUEUE: reject: RCPT from [[:print:]]+\[<HOST>\]: 450 4\.7\.1 <[[:print:]]+>: Helo command rejected: Host not found
 NOQUEUE: reject: RCPT from [[:print:]]+\[<HOST>\]: 450 4\.7\.1 Client host rejected