Фильтр для sendmail

 [Definition]
failregex = [] .*to MTA
            [] .* Mailbox disabled for this recipient
            [], reject.*… Relaying denied
            (User unknown)n* []
            badlogin: .* [] plaintext .* SASL

Отличная штука этот fail2ban :)