Re: [courier-users] How to track failed authentication attempts?

2011-02-24 Thread Matus UHLAR - fantomas
Thus an 87382-node botnet can break an average password with 18 bits of entropy* by the end of the day, with three attempts from each IP. Many times? If many is 35 times per day for 20 years, that makes for about 255675 attempts: barely enough to break that 18-bit entropy password,

Re: [courier-users] How to track failed authentication attempts?

2011-02-24 Thread Michelle Konzack
Hello Matus UHLAR - fantomas, Am 2011-02-24 15:18:46, hacktest Du folgendes herunter: Unfortunately Linux can not do that. And that's why we'd like to have possibility to ban based on something different than just IP. The Kernel lakes for support of Deep Packet Inspection... With DPI you

Re: [courier-users] How to track failed authentication attempts?

2011-02-24 Thread Carlos Lopez
The Kernel lakes for support of Deep Packet Inspection... With DPI you can do all dirty tricks to leafe crackers out of the box/net. It is true that the main kernel does not support it, but there are many commercial vendors that are open sourcing their products in a way to be on the