On Sat, 17 Apr 2021 18:25:47 -0400 (EDT)
Wietse Venema <wie...@porcupine.org> wrote:
> li...@lazygranch.com:
> > > You should enable SASL auth in master.cf NOT main.cf, and ONLY for
> > > a service that needs SASL auth.
> > >
> > > Otherwise you're turning it on for the server-to-server port (25)
> > > where it is not doing any good.
> > >
> > > Wietse
> > >
> >
> > OK now it makes sense to comment out the line in the main.cf. I knew
> > sasl had to be enabled somewhere. As it turns out I had put all the
> > lines in master.cf for the submission 587 but neglected to comment
> > out this line in the main.cf.
> >
> > I did a reload/restart and the mail still works. I will give that
> > spammer an hour and see what shows up. The password guesser would
> > hit the server about every 20 minutes. All my passwords are high
> > entropy 20 characters computer generated.
>
> Even with SASL turned off you will see that some bots try SASL auth.
> But with SASL turned they can't use this to verify passwords.
>
> Wietse
And so it goes. I suppose if this really bugs me I can block the server
in firewalld. I've yet to see it actually deliver mail. Or complain to
the data center.
https://serveroffer.lt
Apr 18 04:11:53 mydomain postfix/smtpd[18308]: connect from
mone183.secundiarourous.com[141.98.10.183]
Apr 18 04:11:53 mydomain postfix/smtpd[18308]: disconnect from
mone183.secundiarourous.com[141.98.10.183] ehlo=1 auth=0/1 quit=1 commands=2/3
Apr 18 04:44:43 mydomain postfix/smtpd[18400]: connect from
mone183.secundiarourous.com[141.98.10.183]
Apr 18 04:44:44 mydomain postfix/smtpd[18400]: disconnect from
mone183.secundiarourous.com[141.98.10.183] ehlo=1 auth=0/1 quit=1 commands=2/3
Apr 18 05:17:38 mydomain postfix/smtpd[18467]: connect from
mone183.secundiarourous.com[141.98.10.183]
Apr 18 05:17:39 mydomain postfix/smtpd[18467]: disconnect from
mone183.secundiarourous.com[141.98.10.183] ehlo=1 auth=0/1 quit=1 commands=2/3
Apr 18 05:50:34 mydomain postfix/smtpd[18524]: connect from
mone183.secundiarourous.com[141.98.10.183]
Apr 18 05:50:35 mydomain postfix/smtpd[18524]: disconnect from
mone183.secundiarourous.com[141.98.10.183] ehlo=1 auth=0/1 quit=1 commands=2/3
Apr 18 06:23:32 mydomain postfix/smtpd[18626]: connect from
mone183.secundiarourous.com[141.98.10.183]
Apr 18 06:23:33 mydomain postfix/smtpd[18626]: disconnect from
mone183.secundiarourous.com[141.98.10.183] ehlo=1 auth=0/1 quit=1 commands=2/3
Apr 18 06:56:24 mydomain postfix/smtpd[18715]: connect from
mone183.secundiarourous.com[141.98.10.183]
Apr 18 06:56:25 mydomain postfix/smtpd[18715]: disconnect from
mone183.secundiarourous.com[141.98.10.183] ehlo=1 auth=0/1 quit=1 commands=2/3
