From 5de1142c170301bfc2b8b3b9e7bc584c0f953888 Mon Sep 17 00:00:00 2001
From: Alex 'AdUser' Z <ad_user@runbox.com>
Date: Tue, 26 Jan 2021 10:45:45 +1000
Subject: [PATCH] + filters/exim.pcre

---
 filters/exim.pcre | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 filters/exim.pcre

diff --git a/filters/exim.pcre b/filters/exim.pcre
new file mode 100644
index 0000000..22de6d6
--- /dev/null
+++ b/filters/exim.pcre
@@ -0,0 +1,11 @@
+SMTP protocol synchronization error \(input sent without waiting for greeting\): rejected connection from .*\[<HOST>\]
+SMTP protocol synchronization error \(next input sent too soon: pipelining was not advertised\): rejected .*\[<HOST>\]
+rejected EHLO from \[<HOST>\]: syntactically invalid argument
+rejected HELO from \[<HOST>\]: syntactically invalid argument
+Connection from \[<HOST>\] refused: too many connections from that IP address
+\[<HOST>\] .* host is listed in zen.spamhaus.org
+\[<HOST>\] .* host is listed in bl.spamcop.net
+\[<HOST>\] .* relay not permitted
+\[<HOST>\] .* too many connections from that IP address
+\[<HOST>\] .* rejected after DATA: This message was detected as possible malware
+\[<HOST>\] .* temporarily rejected RCPT \<\S+\>: lowest numbered MX record points to local host