Hi Doug

Thanks so much for your reply! I've installed it and configured it according
to this

http://www.fail2ban.org/wiki/index.php/ASSP
but I added in the regex 
failregex = .*? \d{5}-\d{5} <HOST> <.*?> got \'non printable hex data\' from
the client before the (.*)

nothing gets logged so far.

Does that look right to you?

Also when assp says its blocking the IP for 15-30 minutes, where does that
IP get stored, as it does not appear to be the ones I know if.


Or is the fact that assp already blocking the ips about as much as I can
hope for on this issue?

Thanks!
John


-----Original Message-----
From: Doug Lytle [mailto:supp...@drdos.info] 
Sent: September-05-13 10:58 AM
To: For Users of ASSP
Subject: Re: [Assp-user] help with smtp attack

>> Sep-04-13 20:29:12 82.152.113.229 got 'non printable hex data' from 
>> the

I'd use Fail2Ban on the ASSP server.

Doug


----------------------------------------------------------------------------
--
Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
Discover the easy way to master current and previous Microsoft technologies
and advance your career. Get an incredible 1,500+ hours of step-by-step
tutorial videos with LearnDevNow. Subscribe today and save!
http://pubads.g.doubleclick.net/gampad/clk?id=58041391&iu=/4140/ostg.clktrk
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user


------------------------------------------------------------------------------
Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
Discover the easy way to master current and previous Microsoft technologies
and advance your career. Get an incredible 1,500+ hours of step-by-step
tutorial videos with LearnDevNow. Subscribe today and save!
http://pubads.g.doubleclick.net/gampad/clk?id=58041391&iu=/4140/ostg.clktrk
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to