On 2022-01-14 07:33, Maurizio Caloro wrote:
Hello, I see he tried to log in "authentication failed" and failed ,
but the IP is blacklisted, please why? should it not be blocked
before.
--
OS
Debian 10.11 - Postfix - mail_version = 3.4.14
--
Main.cf
postscreen_access_list = permit_mynetworks,
cidr:/etc/postfix/whitelistCIDR+IP, cidr:/etc/postfix/blacklistIP
--
BlacklistIP
root@mail:/etc/postfix# cat blacklistIP | grep 5.188.206.199
5.188.206.199 REJECT
--
Mail.log
Jan 14 07:17:56 nmail postfix/smtps/smtpd[7809]: warning:
unknown[5.188.206.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jan 14 07:17:57 nmail postfix/smtps/smtpd[7809]: lost connection after
AUTH from unknown[5.188.206.199]
This is smtps (port 465). Your config and blocklist is for postscreen
which should only be enabled for port 25.
--
Christian Kivalo
