I am using CSF/LFD on my CentOS 7 server, and would like to use it to temporarily block IP addresses that have multiple failed Postfix AUTH attempts. You know the one, I get line after line of:
lost connection after AUTH from host.example.com[126.96.36.199]
Once perhaps 6 of these have happened, I would like to block the IP for a while. I know this can be done with fail2ban but I am using CSF. I have looked around for info but can't figure out how it can be achieved. Is it possible?