At Mon, 16 Apr 2018 09:46:21 -0500 fmo...@fmp.com wrote: > > On Sun, 2018-04-15 at 22:53 +0000, Steven Jones wrote: > > We are currently under brute force attack on our mailman server's web > > ui. > > > > > > Is there anything / feature that Mailman has that can be used to > > watch/monitor it? > > A related question would be whether there's any way to correlate failed > web UI login attempts with IP addresses. It doesn't appear that at > present Mailman 2 logs failed web UI attempts at all, although I may be > missing something.
They might be in Apache's logs. > > If this were possible, a system-level utility such as fail2ban could be > used to monitor logs and establish kernel filter rules to block these > IPs. > -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services hel...@deepsoft.com -- Webhosting Services ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
