On 6/23/23 04:26, Luciano Mannucci via Postfix-users wrote:
On Thu, 22 Jun 2023 21:05:35 +0200
André Rodier via Postfix-users <postfix-users@postfix.org> wrote:

What are you using on your side ?
I have a small script that scans the log for failed login attempts,
banning the offending ip via firewall if it sees more than a certain
number of attempts (initially set to 24, now lowered to 22). Ir runs
every 2 minutes and seems quite effective: in 10 years I've had just
one false positive (so far) that I had to set free by hand.

You can also lower the threshold of failed attempts in fail2ban as well.  I have a long list of banned ip addresses in my system. I've also changed the length of time addresses get banned for from hours to months.

--Curtis

_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to