Am 18.11.2008 um 01:13 schrieb James Beam:
No, this server is purely spam/virus front end (more efficient than
the ms equivalent for exchange) - no real users exist at all. I use
smtproutes to forward the emails on to exchange once simscan has
done its duty.
My goal was to stop the ssh monkeys from running dictionary assaults
day in and day out.
Another fine tool for this job is DenyHosts (http://denyhosts.sourceforge.net/
).
A paticular useful feature is it's "synchronization mode". From the
FAQ: "This feature is intended to provide the ability to proactively
deny ip addresses that have attacked other users of DenyHosts."
However, in contrast to fail2ban, DenyHosts is limited to SSH.
Cheers,
Andreas
From: "Phil Leinhauser" <[EMAIL PROTECTED]>
Sent: Monday, November 17, 2008 3:45 PM
Do you aim fail2ban at your POP, IMAP, SMTP logs? Have you caught
much with it?
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
