Re: [qmailtoaster] POP3 address harvesting

2007-09-27 Thread Andreas Galatis
Am Donnerstag, 27. September 2007 03:38 schrieb Todd W:
 From: Kevin Katz [EMAIL PROTECTED]

  We have recently been flooded by bots hitting the pop3 looking for valid
  email addresses. Most of our clients use pop3-ssl, which the bots don't
  seem
  to touch that, but I hate to shut down pop3 access all together. Has
  anyone
  on the list come up with a solution to limit the number of invalid pop3
  login attempts.

 The most effective thing I've found to do is implement throttling via
 blockhosts or similar. This is a layer above QMT, which is nice because it
 generally works on all things linux.

 Regards,

 Todd W.

Have a look at sshdfilter. a tool written for ssh-attacks but  can be 
customized to monitor pop3 or every service you want.
http://www.csc.liv.ac.uk/~greg/sshdfilter/


Regards,
Andreas

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] POP3 address harvesting

2007-09-26 Thread Kevin Katz
We have recently been flooded by bots hitting the pop3 looking for valid
email addresses. Most of our clients use pop3-ssl, which the bots don't seem
to touch that, but I hate to shut down pop3 access all together. Has anyone
on the list come up with a solution to limit the number of invalid pop3
login attempts. 

Thank You
Kevin


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] POP3 address harvesting

2007-09-26 Thread Helmut Fritz
Do you mean via smtp??? 

-Original Message-
From: Kevin Katz [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 26, 2007 2:28 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] POP3 address harvesting

We have recently been flooded by bots hitting the pop3 looking for valid
email addresses. Most of our clients use pop3-ssl, which the bots don't seem
to touch that, but I hate to shut down pop3 access all together. Has anyone
on the list come up with a solution to limit the number of invalid pop3
login attempts. 

Thank You
Kevin


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] POP3 address harvesting

2007-09-26 Thread Kevin Katz
No, POP3.

-Original Message-
From: Helmut Fritz [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 26, 2007 3:17 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] POP3 address harvesting

Do you mean via smtp??? 

-Original Message-
From: Kevin Katz [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 26, 2007 2:28 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] POP3 address harvesting

We have recently been flooded by bots hitting the pop3 looking for valid
email addresses. Most of our clients use pop3-ssl, which the bots don't seem
to touch that, but I hate to shut down pop3 access all together. Has anyone
on the list come up with a solution to limit the number of invalid pop3
login attempts. 

Thank You
Kevin


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] POP3 address harvesting

2007-09-26 Thread Todd W


From: Kevin Katz [EMAIL PROTECTED]



We have recently been flooded by bots hitting the pop3 looking for valid
email addresses. Most of our clients use pop3-ssl, which the bots don't 
seem
to touch that, but I hate to shut down pop3 access all together. Has 
anyone

on the list come up with a solution to limit the number of invalid pop3
login attempts.


The most effective thing I've found to do is implement throttling via 
blockhosts or similar. This is a layer above QMT, which is nice because it 
generally works on all things linux.


Regards,

Todd W.


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]