Re: [CentOS] Dovecot attack

2010-08-25 Thread Dag Wieers
On Mon, 23 Aug 2010, Rob Kampen wrote: > Dag Wieers wrote: > >> pam_shield is available from RPMforge and requires a minimum of >> configuration. > > Never heard of this one before - just installed and simple to configure. > I note that version 0.9.3 was released April 2010 and includes a > su

Re: [CentOS] Dovecot attack

2010-08-25 Thread Dag Wieers
On Mon, 23 Aug 2010, Karanbir Singh wrote: > On 08/23/2010 03:58 PM, Rob Kampen wrote: >>> pam_shield is available from RPMforge and requires a minimum of >>> configuration. >> Never heard of this one before - just installed and simple to configure. >> I note that version 0.9.3 was released April

Re: [CentOS] Dovecot attack

2010-08-23 Thread Karanbir Singh
On 08/23/2010 03:58 PM, Rob Kampen wrote: >> pam_shield is available from RPMforge and requires a minimum of >> configuration. > Never heard of this one before - just installed and simple to configure. > I note that version 0.9.3 was released April 2010 and includes a > supposed memory leak fix - m

Re: [CentOS] Dovecot attack

2010-08-23 Thread Rob Kampen
Dag Wieers wrote: On Mon, 23 Aug 2010, Timothy Murphy wrote: It seems there was some kind of attack against dovecot on my server (CentOS-5.5) with a hundred or so logwatch entries like: = **Unmatched Entries** dovecot-auth: pam_succeed_if(do

Re: [CentOS] Dovecot attack

2010-08-23 Thread Dag Wieers
On Mon, 23 Aug 2010, Timothy Murphy wrote: > It seems there was some kind of attack against dovecot on my server > (CentOS-5.5) with a hundred or so logwatch entries like: > = > **Unmatched Entries** > dovecot-auth: pam_succeed_if(dovecot:auth): > error ret

[CentOS] Dovecot attack

2010-08-23 Thread Timothy Murphy
It seems there was some kind of attack against dovecot on my server (CentOS-5.5) with a hundred or so logwatch entries like: = **Unmatched Entries** dovecot-auth: pam_succeed_if(dovecot:auth): error retrieving information about user admin dovecot-auth: pam