I am currently looking into fail2ban and qmail. (since my sandbox stuff on centos still failing ;)
Ole J > Eric, > > I will look at the logs in more detail. Thanks for your input, I won't > dwell on it. > > CJ > > Eric Shubert wrote: >> I don't know Fail2ban, so that might or might not handle it. >> >> Are you sure you're not dropping them after 3 tries now? There are >> only 2 few with 2 max. >> >> If you look a the logs in more detail, I expect you'd find that these >> attempts are coming from limited IP address ranges. You could block >> them with iptables. >> >> I don't think these are worth being concerned about though. >> >> Maxwell Smart wrote: >>> Anyway to drop their connection after 3 tries? >>> >>> CJ >>> >>> Eric Shubert wrote: >>>> These look like script kiddies (lame crackers) to me, not >>>> harvesters. They're simply a nuisance. >>>> >>>> Maxwell Smart wrote: >>>>> Greetings fellow Qmailers, >>>>> >>>>> I am trying to find a way to block harvesters. I am using >>>>> Fail2ban, but must not have it set up correctly to block the >>>>> harvesters after 3 attempts. If anyone can shed some light on how >>>>> to set this up it would be greatly appreciated. >>>>> >>>>> Here is my vpopmail logwatch >>>>> >>>>> --------------------- vpopmail Begin ------------------------ >>>>> >>>>> No Such User Found: >>>>> acc...@area510.net - 1 Time(s) >>>>> acco...@area510.net - 1 Time(s) >>>>> ad...@area510.net - 2 Time(s) >>>>> administra...@area510.net - 2 Time(s) >>>>> a...@area510.net - 1 Time(s) >>>>> bac...@area510.net - 1 Time(s) >>>>> char...@area510.net - 1 Time(s) >>>>> da...@area510.net - 1 Time(s) >>>>> in...@area510.net - 1 Time(s) >>>>> in...@area510.net - 1 Time(s) >>>>> infor...@area510.net - 1 Time(s) >>>>> li...@area510.net - 1 Time(s) >>>>> li...@area510.net - 1 Time(s) >>>>> m...@area510.net - 1 Time(s) >>>>> mo...@area510.net - 1 Time(s) >>>>> mon...@area510.net - 1 Time(s) >>>>> nic...@area510.net - 1 Time(s) >>>>> orac...@area510.net - 1 Time(s) >>>>> ora...@area510.net - 2 Time(s) >>>>> p...@area510.net - 1 Time(s) >>>>> r...@area510.net - 2 Time(s) >>>>> serv...@area510.net - 1 Time(s) >>>>> ser...@area510.net - 1 Time(s) >>>>> syb...@area510.net - 2 Time(s) >>>>> te...@area510.net - 1 Time(s) >>>>> te...@area510.net - 1 Time(s) >>>>> te...@area510.net - 1 Time(s) >>>>> t...@area510.net - 2 Time(s) >>>>> te...@area510.net - 1 Time(s) >>>>> tho...@area510.net - 1 Time(s) >>>>> us...@area510.net - 1 Time(s) >>>>> us...@area510.net - 1 Time(s) >>>>> us...@area510.net - 1 Time(s) >>>>> u...@area510.net - 2 Time(s) >>>>> w...@area510.net - 2 Time(s) >>>>> webmas...@area510.net - 2 Time(s) >>>>> w...@area510.net - 1 Time(s) >>>>> w...@area510.net - 1 Time(s) >>>>> w...@area510.net - 1 Time(s) >>>>> w...@area510.net - 2 Time(s) >>>>> >>>>> ---------------------- vpopmail End ------------------------- >>>>> >> >> > > --------------------------------------------------------------------------------- > Qmailtoaster is sponsored by Vickers Consulting Group > (www.vickersconsulting.com) > Vickers Consulting Group offers Qmailtoaster support and > installations. > If you need professional help with your setup, contact them today! > --------------------------------------------------------------------------------- > Please visit qmailtoaster.com for the latest news, updates, and > packages. > > To unsubscribe, e-mail: > qmailtoaster-list-unsubscr...@qmailtoaster.com > For additional commands, e-mail: > qmailtoaster-list-h...@qmailtoaster.com > > > --------------------------------------------------------------------------------- Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! --------------------------------------------------------------------------------- Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com