> On 02-13-2022 11:56 am, [email protected] wrote: > Just to clarify, does this error mean they requested SASL login and postfix > told them it wasn't > enabled? > I am under the belief SASL logins are disabled on port 25. > (smtpd_sasl_auth_enable = > no) > Or does it mean postfix allowed them to provide login details and it failed > because of bad > user/pass? > I just want to verify its not enabled, because they repeatedly did this like > a dictionary brute force > attempt. > > > postfix/smtpd[1940626]: connect from unknown[5.34.207.103] > postfix/smtpd[1940626]: warning: unknown[5.34.207.103]: SASL LOGIN > authentication failed: > UGFzc3dvcmQ6 > postfix/smtpd[1940626]: disconnect from unknown[5.34.207.103] ehlo=1 auth=0/1 > rset=1 quit=1 > commands=3/4
I am sorry, ignore this whole thread. My brain wasn't fully engaged, this log entry was for port 587 not on port 25.
