https://bugs.contribs.org/show_bug.cgi?id=10749
--- Comment #5 from Catton <[email protected]> ---
Jean-Philippe,
December 2018, one of my site was getting a brute-force attack and getting
past fail2ban by using multiple ip addresses - mainly on port 465 and from
non-US countries. They compromised about 15 mail accounts and started sending
out bad stuff. The Maxmind (Fragmented) Non-Us list was to big for iptables. So
I used the old original world IP list excluding US. This did stop the attack
but many US addresses were also excluded, so I started adding them in at the
top like the 12. that are AT&T.
The Geoip (Mail) Contrib blocks email but access to 465 or webmail.
I was really looking forward to a GeoIP solution for that.
If the limit gets set to 50 that would be a good start.
I can then remove my 40DenyRiffRaff and test.
Thanks all.
--
You are receiving this mail because:
You are the QA Contact for the bug._______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
