Hi List,... i've installed DenyHosts now for the second time and I'm absoluely pleased with it ...
But ... In the denyhosts.conf there is the following Section: ####################################################################### # # BLOCK_SERVICE: the service name that should be blocked in HOSTS_DENY # # man 5 hosts_access for details # # eg. sshd: 127.0.0.1 # will block sshd logins from 127.0.0.1 # # To block all services for the offending host: #BLOCK_SERVICE = ALL # To block only sshd: BLOCK_SERVICE = sshd # To only record the offending host and nothing else (if using # an auxilary file to list the hosts). Refer to: # http://denyhosts.sourceforge.net/faq.html#aux #BLOCK_SERVICE = # ####################################################################### In my opinion it says, that i can choose to block the Host for all services, if he had tried to contact me using ssh. So ... ... is it possible monitoring other services (i.e. like FTP, SMTP) and exclude attacking hosts by adding it to the hosts.deny-file like DenyHosts do it in the "ssh-case"? In an actual case i found - i.e. - the following entries in my /var/log/syslog - file: ......... Jul 13 09:16:32 h1396903 postfix/smtpd[18411]: NOQUEUE: reject: RCPT from 118-169-206-82.dynamic.hinet.net[118.169.206.82]: 554 5.7.1 <[EMAIL PROTECTED]>: Relay access denied; from=<[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]> proto=SMTP helo=<www.MyMainServer.com> Jul 13 09:16:32 h1396903 postfix/smtpd[18411]: lost connection after RCPT from 118-169-206-82.dynamic.hinet.net[118.169.206.82] Jul 13 09:16:32 h1396903 postfix/smtpd[18411]: disconnect from 118-169-206-82.dynamic.hinet.net[118.169.206.82] .......... Reading this, i recognized, that a script-kiddie tries to use my server as a relay. But he don't tried to connect using ssh. So,... ... is it possible to block this attempts using DenyHosts? Greetz ... Stefan ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08 _______________________________________________ Denyhosts-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/denyhosts-user
