I am currently looking into fail2ban and qmail.
(since my sandbox stuff on centos still failing ;)
Ole J
> Eric,
>
> I will look at the logs in more detail. Thanks for your input, I won't
> dwell on it.
>
> CJ
>
> Eric Shubert wrote:
>> I don't know Fail2ban, so that might or might not handle it.
>>
>> Are you sure you're not dropping them after 3 tries now? There are
>> only 2 few with 2 max.
>>
>> If you look a the logs in more detail, I expect you'd find that these
>> attempts are coming from limited IP address ranges. You could block
>> them with iptables.
>>
>> I don't think these are worth being concerned about though.
>>
>> Maxwell Smart wrote:
>>> Anyway to drop their connection after 3 tries?
>>>
>>> CJ
>>>
>>> Eric Shubert wrote:
>>>> These look like script kiddies (lame crackers) to me, not
>>>> harvesters. They're simply a nuisance.
>>>>
>>>> Maxwell Smart wrote:
>>>>> Greetings fellow Qmailers,
>>>>>
>>>>> I am trying to find a way to block harvesters. I am using
>>>>> Fail2ban, but must not have it set up correctly to block the
>>>>> harvesters after 3 attempts. If anyone can shed some light on how
>>>>> to set this up it would be greatly appreciated.
>>>>>
>>>>> Here is my vpopmail logwatch
>>>>>
>>>>> --------------------- vpopmail Begin ------------------------
>>>>>
>>>>> No Such User Found:
>>>>> acc...@area510.net - 1 Time(s)
>>>>> acco...@area510.net - 1 Time(s)
>>>>> ad...@area510.net - 2 Time(s)
>>>>> administra...@area510.net - 2 Time(s)
>>>>> a...@area510.net - 1 Time(s)
>>>>> bac...@area510.net - 1 Time(s)
>>>>> char...@area510.net - 1 Time(s)
>>>>> da...@area510.net - 1 Time(s)
>>>>> in...@area510.net - 1 Time(s)
>>>>> in...@area510.net - 1 Time(s)
>>>>> infor...@area510.net - 1 Time(s)
>>>>> li...@area510.net - 1 Time(s)
>>>>> li...@area510.net - 1 Time(s)
>>>>> m...@area510.net - 1 Time(s)
>>>>> mo...@area510.net - 1 Time(s)
>>>>> mon...@area510.net - 1 Time(s)
>>>>> nic...@area510.net - 1 Time(s)
>>>>> orac...@area510.net - 1 Time(s)
>>>>> ora...@area510.net - 2 Time(s)
>>>>> p...@area510.net - 1 Time(s)
>>>>> r...@area510.net - 2 Time(s)
>>>>> serv...@area510.net - 1 Time(s)
>>>>> ser...@area510.net - 1 Time(s)
>>>>> syb...@area510.net - 2 Time(s)
>>>>> te...@area510.net - 1 Time(s)
>>>>> te...@area510.net - 1 Time(s)
>>>>> te...@area510.net - 1 Time(s)
>>>>> t...@area510.net - 2 Time(s)
>>>>> te...@area510.net - 1 Time(s)
>>>>> tho...@area510.net - 1 Time(s)
>>>>> us...@area510.net - 1 Time(s)
>>>>> us...@area510.net - 1 Time(s)
>>>>> us...@area510.net - 1 Time(s)
>>>>> u...@area510.net - 2 Time(s)
>>>>> w...@area510.net - 2 Time(s)
>>>>> webmas...@area510.net - 2 Time(s)
>>>>> w...@area510.net - 1 Time(s)
>>>>> w...@area510.net - 1 Time(s)
>>>>> w...@area510.net - 1 Time(s)
>>>>> w...@area510.net - 2 Time(s)
>>>>>
>>>>> ---------------------- vpopmail End -------------------------
>>>>>
>>
>>
>
> ---------------------------------------------------------------------------------
> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com)
> Vickers Consulting Group offers Qmailtoaster support and
> installations.
> If you need professional help with your setup, contact them today!
> ---------------------------------------------------------------------------------
> Please visit qmailtoaster.com for the latest news, updates, and
> packages.
>
> To unsubscribe, e-mail:
> qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail:
> qmailtoaster-list-h...@qmailtoaster.com
>
>
>
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
