Eric,
I will look at the logs in more detail. Thanks for your input, I won't
dwell on it.
CJ
Eric Shubert wrote:
> I don't know Fail2ban, so that might or might not handle it.
>
> Are you sure you're not dropping them after 3 tries now? There are
> only 2 few with 2 max.
>
> If you look a the logs in more detail, I expect you'd find that these
> attempts are coming from limited IP address ranges. You could block
> them with iptables.
>
> I don't think these are worth being concerned about though.
>
> Maxwell Smart wrote:
>> Anyway to drop their connection after 3 tries?
>>
>> CJ
>>
>> Eric Shubert wrote:
>>> These look like script kiddies (lame crackers) to me, not
>>> harvesters. They're simply a nuisance.
>>>
>>> Maxwell Smart wrote:
>>>> Greetings fellow Qmailers,
>>>>
>>>> I am trying to find a way to block harvesters. I am using
>>>> Fail2ban, but must not have it set up correctly to block the
>>>> harvesters after 3 attempts. If anyone can shed some light on how
>>>> to set this up it would be greatly appreciated.
>>>>
>>>> Here is my vpopmail logwatch
>>>>
>>>> --------------------- vpopmail Begin ------------------------
>>>>
>>>> No Such User Found:
>>>> acc...@area510.net - 1 Time(s)
>>>> acco...@area510.net - 1 Time(s)
>>>> ad...@area510.net - 2 Time(s)
>>>> administra...@area510.net - 2 Time(s)
>>>> a...@area510.net - 1 Time(s)
>>>> bac...@area510.net - 1 Time(s)
>>>> char...@area510.net - 1 Time(s)
>>>> da...@area510.net - 1 Time(s)
>>>> in...@area510.net - 1 Time(s)
>>>> in...@area510.net - 1 Time(s)
>>>> infor...@area510.net - 1 Time(s)
>>>> li...@area510.net - 1 Time(s)
>>>> li...@area510.net - 1 Time(s)
>>>> m...@area510.net - 1 Time(s)
>>>> mo...@area510.net - 1 Time(s)
>>>> mon...@area510.net - 1 Time(s)
>>>> nic...@area510.net - 1 Time(s)
>>>> orac...@area510.net - 1 Time(s)
>>>> ora...@area510.net - 2 Time(s)
>>>> p...@area510.net - 1 Time(s)
>>>> r...@area510.net - 2 Time(s)
>>>> serv...@area510.net - 1 Time(s)
>>>> ser...@area510.net - 1 Time(s)
>>>> syb...@area510.net - 2 Time(s)
>>>> te...@area510.net - 1 Time(s)
>>>> te...@area510.net - 1 Time(s)
>>>> te...@area510.net - 1 Time(s)
>>>> t...@area510.net - 2 Time(s)
>>>> te...@area510.net - 1 Time(s)
>>>> tho...@area510.net - 1 Time(s)
>>>> us...@area510.net - 1 Time(s)
>>>> us...@area510.net - 1 Time(s)
>>>> us...@area510.net - 1 Time(s)
>>>> u...@area510.net - 2 Time(s)
>>>> w...@area510.net - 2 Time(s)
>>>> webmas...@area510.net - 2 Time(s)
>>>> w...@area510.net - 1 Time(s)
>>>> w...@area510.net - 1 Time(s)
>>>> w...@area510.net - 1 Time(s)
>>>> w...@area510.net - 2 Time(s)
>>>>
>>>> ---------------------- vpopmail End -------------------------
>>>>
>
>
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
