Hi,
Does anyone know how to block, or auto programs in Gentoo to limit
or stop people scanning for a user/password hacking on your firewall?
Besides disabling those ports, I still need the port accessable
from the outside, and I guess they'd just try imap if pop was blocked.
I'm running iptables, postfix & courier
This has been ongoing in excess of 12 Hrs now...
Jun 17 10:25:20 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
Jun 17 10:25:21 jumpgate pop3d: LOGIN FAILED, user=dave,
ip=[::ffff:93.186.195.234]
Jun 17 10:25:26 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
Jun 17 10:25:27 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
Jun 17 10:25:27 jumpgate pop3d: LOGIN FAILED, user=dave,
ip=[::ffff:93.186.195.234]
Jun 17 10:25:33 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
Jun 17 10:25:33 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
Jun 17 10:25:34 jumpgate pop3d: LOGIN FAILED, user=dave,
ip=[::ffff:93.186.195.234]
Jun 17 10:25:39 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
Jun 17 10:25:39 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
Jun 17 10:25:40 jumpgate pop3d: LOGIN FAILED, user=dave,
ip=[::ffff:93.186.195.234]
Jun 17 10:25:45 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
Jun 17 10:25:46 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
Jun 17 10:25:46 jumpgate pop3d: LOGIN FAILED, user=dave,
ip=[::ffff:93.186.195.234]
Jun 17 10:25:52 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
Jun 17 10:25:52 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
Jun 17 10:25:53 jumpgate pop3d: LOGIN FAILED, user=dave,
ip=[::ffff:93.186.195.234]
Jun 17 10:25:58 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
Jun 17 10:25:58 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
Jun 17 10:25:59 jumpgate pop3d: LOGIN FAILED, user=dave,
ip=[::ffff:93.186.195.234]
Jun 17 10:26:04 jumpgate pop3d: Disconnected, ip=[::ffff:93.186.195.234]
Jun 17 10:26:05 jumpgate pop3d: Connection, ip=[::ffff:93.186.195.234]
