Re: [Assp-test] SMTP auth errors - block only on main port?

2021-03-10 Thread Thomas Eckardt
lopment mailing list" Datum: 10.03.2021 19:57 Betreff: Re: [Assp-test] SMTP auth errors - block only on main port? Thanks for the reply Thomas. I hope you've been well. I don't see a way for our firewall hardware to get the lists from ASSP. That's not a question for you, just a state

Re: [Assp-test] SMTP auth errors - block only on main port?

2021-03-10 Thread K Post
gt; > > > > > Von:"K Post" > An: "ASSP development mailing list" < > assp-test@lists.sourceforge.net> > Datum:09.03.2021 19:51 > Betreff:Re: [Assp-test] SMTP auth errors - block only on main > port? > ---

Re: [Assp-test] SMTP auth errors - block only on main port?

2021-03-10 Thread Thomas Eckardt
ling list" Datum: 09.03.2021 19:51 Betreff: Re: [Assp-test] SMTP auth errors - block only on main port? Hiya Doug. Good to hear from you. Thanks for the reply. We're all Windows here, so no iptables = no Fail2Ban :( And I don't see a way of getting ASSP's ip lists >aut

Re: [Assp-test] SMTP auth errors - block only on main port?

2021-03-09 Thread K Post
Hiya Doug. Good to hear from you. Thanks for the reply. We're all Windows here, so no iptables = no Fail2Ban :( And I don't see a way of getting ASSP's ip lists >automatically< in the hardware firewalls that we use. The actor is attempting to sign in from at least a couple dozen IP's,

Re: [Assp-test] SMTP auth errors - block only on main port?

2021-03-09 Thread Doug Lytle
>> Summary question: is there a way to immediately ban IP's that try SMTP auth >> on a specific port, but not on other ports? Allow SMTP auth on listenPort2, >> but immediately ban any IP that fails SMTP auth on port 25? I don't think that is currently an option with ASSP, but I currently do

[Assp-test] SMTP auth errors - block only on main port?

2021-03-09 Thread K Post
Summary question: is there a way to immediately ban IP's that try SMTP auth on a specific port, but not on other ports? Allow SMTP auth on listenPort2, but immediately ban any IP that *fails* SMTP auth on port 25? We're seeing a lot of smtp auth failures from 163 dot com from many many many