Re: [qmailtoaster] vchkpw-smtp attack

2009-07-20 Thread Aleksander Podsiadly
W dniu 19.07.2009 21:58, nightduke pisze: Nice tool. I will use it. Thanks Than look at open bugs #219 and #220, there are my 2 proposed patches for proper interpreting Apache log and vpopmail. http://www.ossec.net/bugs/ On http://www.ossec.net/wiki/index.php/SquirrelMail are my rules

Re: [qmailtoaster] vchkpw-smtp attack

2009-07-19 Thread nightduke
Nice tool. I will use it. Thanks 2009/7/10 Aleksander Podsiadly a...@westside.kielce.pl: W dniu 09.07.2009 23:28, nightduke pisze: i don't understand, can you explain? Thanks 2009/7/9 Aleksander Podsiadly a...@westside.kielce.pl: W dniu 07.07.2009 00:36, Jake Vickers pisze:

Re: [qmailtoaster] vchkpw-smtp attack

2009-07-09 Thread Aleksander Podsiadly
W dniu 07.07.2009 00:36, Jake Vickers pisze: *Those* types of attacks can be handled with fail2ban. And with ossec-hids. -- Pozdrawiam / Regards, Aleksander Podsiadły - Qmailtoaster is sponsored by Vickers

Re: [qmailtoaster] vchkpw-smtp attack

2009-07-09 Thread nightduke
i don't understand, can you explain? Thanks 2009/7/9 Aleksander Podsiadly a...@westside.kielce.pl: W dniu 07.07.2009 00:36, Jake Vickers pisze: *Those* types of attacks can be handled with fail2ban. And with ossec-hids. -- Pozdrawiam / Regards, Aleksander Podsiadły

Re: [qmailtoaster] vchkpw-smtp attack

2009-07-09 Thread Aleksander Podsiadly
W dniu 09.07.2009 23:28, nightduke pisze: i don't understand, can you explain? Thanks 2009/7/9 Aleksander Podsiadlya...@westside.kielce.pl: W dniu 07.07.2009 00:36, Jake Vickers pisze: *Those* types of attacks can be handled with fail2ban. And with ossec-hids. --

[qmailtoaster] vchkpw-smtp attack

2009-07-06 Thread nightduke
Jul 6 14:42:14 vps vpopmail[28104]: vchkpw-smtp: invalid user/domain characters dÇ:58.63.151.44 Hi at my server i saw at the log a few attemps of deliver email. Anyone know a way to block this kind of attack? Thanks

Re: [qmailtoaster] vchkpw-smtp attack

2009-07-06 Thread Jake Vickers
nightduke wrote: Jul 6 14:42:14 vps vpopmail[28104]: vchkpw-smtp: invalid user/domain characters dÇ:58.63.151.44 Hi at my server i saw at the log a few attemps of deliver email. Anyone know a way to block this kind of attack? Thanks Yes, fail2ban. We've talked about it on the list

Re: [qmailtoaster] vchkpw-smtp attack

2009-07-06 Thread nightduke
Jul 6 14:37:09 vps vpopmail[19826]: vchkpw-smtp: vpopmail user not found webmas ter@:58.63.151.44 2009/7/7 Jake Vickers j...@qmailtoaster.com: nightduke wrote: Jul  6 14:42:14 vps vpopmail[28104]: vchkpw-smtp: invalid user/domain characters dÇ:58.63.151.44 Hi at my server i saw at the log

Re: [qmailtoaster] vchkpw-smtp attack

2009-07-06 Thread Jake Vickers
nightduke wrote: Jul 6 14:37:09 vps vpopmail[19826]: vchkpw-smtp: vpopmail user not found webmas ter@:58.63.151.44 *Those* types of attacks can be handled with fail2ban. - Qmailtoaster is sponsored by

Re: [qmailtoaster] vchkpw-smtp attack

2009-07-06 Thread nightduke
That seems to be an attack, it's my opinion. 2009/7/7 nightduke nightduke2...@gmail.com: Jul  6 14:37:09 vps vpopmail[19826]: vchkpw-smtp: vpopmail user not found webmas ter@:58.63.151.44 2009/7/7 Jake Vickers j...@qmailtoaster.com: nightduke wrote: Jul  6 14:42:14 vps vpopmail[28104]:

Re: [qmailtoaster] vchkpw-smtp attack

2009-07-06 Thread nightduke
fail2ban can be used with qmail? Thanks anyway. 2009/7/7 Jake Vickers j...@qmailtoaster.com: nightduke wrote: Jul  6 14:37:09 vps vpopmail[19826]: vchkpw-smtp: vpopmail user not found webmas ter@:58.63.151.44 *Those* types of attacks can be handled with fail2ban.