Fail2Ban Reporting Hub

#!/usr/bin/env python3
import sys
import requests

API_KEY = "your_api_key_here"
API_URL = "https://api.dnsbl.io/fail2ban/report"

def report_ip(client_address):
    payload = {
        "reported_ip": client_address,
        "service": "postfix",
        "reason": "Spam source detected by policy service"
    }
    headers = {"Authorization": f"Bearer {API_KEY}"}
    requests.post(API_URL, json=payload, headers=headers)

# Postfix policy protocol implementation
for line in sys.stdin:
    if line.startswith("client_address="):
        ip = line.split("=")[1].strip()
        report_ip(ip)
    if line.strip() == "":
        print("action=DUNNO\n")
        sys.stdout.flush()

-- /etc/rspamd/plugins.d/dnsbl_report.lua
local rspamd_http = require "rspamd_http"
local rspamd_logger = require "rspamd_logger"

local function dnsbl_report(task)
  local ip = task:get_from_ip()
  if not ip or not ip:is_valid() then return end
  
  local score = task:get_metric_score('default')
  if score[1] > 10 then -- Report if spam score > 10
    rspamd_http.request({
      url = 'https://api.dnsbl.io/fail2ban/report',
      headers = {
        ['Authorization'] = 'Bearer YOUR_API_KEY',
        ['Content-Type'] = 'application/json'
      },
      body = string.format('{"reported_ip":"%s","service":"rspamd","reason":"Spam score: %.2f"}',
        tostring(ip), score[1])
    })
  end
end

rspamd_config:register_symbol({
  name = 'DNSBL_REPORT',
  type = 'postfilter',
  callback = dnsbl_report
})