Hello friends,
Just let you know. My previous email about using Fail2ban with qmail and vpopmail, more specific to ban email adr. Harvesting / hammering pop3 , seems to be working. Cheers! B/R Ole J Message from Fail2ban: [Fail2Ban] pop3: banned 72.3.226.134 Hi, The IP 72.3.226.134 has just been banned by Fail2Ban after 3 attempts against pop3. Here are more information about 72.3.226.134: (.) Checking IP table chain "pop3": Chain fail2ban-pop3 (1 references) target prot opt source destination DROP all -- 72.3.226.134 0.0.0.0/0 RETURN all -- 0.0.0.0/0 0.0.0.0/0 Checking logfile "maillog": Aug 31 13:57:18 FQDN vpopmail[11798]: vchkpw-pop3: vpopmail user not found julia@:72.3.226.134 Aug 31 13:57:19 FQDN vpopmail[11803]: vchkpw-pop3: vpopmail user not found audio@:72.3.226.134 Aug 31 13:57:20 FQDN vpopmail[11807]: vchkpw-pop3: vpopmail user not found josh@:72.3.226.134 Aug 31 13:57:21 FQDN vpopmail[11811]: vchkpw-pop3: vpopmail user not found alex@:72.3.226.134
