RE: [qmailtoaster] re: harvesting

2009-08-29 Thread Ole N.Johansen
Eric, I will do that, just have to test the configuration out first. -Original Message- From: news [mailto:n...@ger.gmane.org] On Behalf Of Eric Shubert Sent: 29. august 2009 00:51 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] re: harvesting Not stupid really. I

Re: [qmailtoaster] re: harvesting

2009-08-29 Thread Constantin IOAJA
, but no one tries to hammer my vpopmail .. Ole J *From:* Constantin IOAJA [mailto:io...@cartel-alfa.ro] *Sent:* 28. august 2009 21:40 *To:* qmailtoaster-list@qmailtoaster.com *Subject:* Re: [qmailtoaster] re: harvesting

[qmailtoaster] re: harvesting

2009-08-28 Thread Maxwell Smart
Greetings fellow Qmailers, I am trying to find a way to block harvesters. I am using Fail2ban, but must not have it set up correctly to block the harvesters after 3 attempts. If anyone can shed some light on how to set this up it would be greatly appreciated. Here is my vpopmail logwatch

Re: [qmailtoaster] re: harvesting

2009-08-28 Thread Eric Shubert
These look like script kiddies (lame crackers) to me, not harvesters. They're simply a nuisance. Maxwell Smart wrote: Greetings fellow Qmailers, I am trying to find a way to block harvesters. I am using Fail2ban, but must not have it set up correctly to block the harvesters after 3

Re: [qmailtoaster] re: harvesting

2009-08-28 Thread Maxwell Smart
Anyway to drop their connection after 3 tries? CJ Eric Shubert wrote: These look like script kiddies (lame crackers) to me, not harvesters. They're simply a nuisance. Maxwell Smart wrote: Greetings fellow Qmailers, I am trying to find a way to block harvesters. I am using Fail2ban, but

Re: [qmailtoaster] re: harvesting

2009-08-28 Thread Eric Shubert
I don't know Fail2ban, so that might or might not handle it. Are you sure you're not dropping them after 3 tries now? There are only 2 few with 2 max. If you look a the logs in more detail, I expect you'd find that these attempts are coming from limited IP address ranges. You could block

Re: [qmailtoaster] re: harvesting

2009-08-28 Thread Maxwell Smart
Eric, I will look at the logs in more detail. Thanks for your input, I won't dwell on it. CJ Eric Shubert wrote: I don't know Fail2ban, so that might or might not handle it. Are you sure you're not dropping them after 3 tries now? There are only 2 few with 2 max. If you look a the logs

Re: [qmailtoaster] re: harvesting

2009-08-28 Thread ole . johansen
I am currently looking into fail2ban and qmail. (since my sandbox stuff on centos still failing ;) Ole J Eric, I will look at the logs in more detail. Thanks for your input, I won't dwell on it. CJ Eric Shubert wrote: I don't know Fail2ban, so that might or might not handle it. Are

Re: [qmailtoaster] re: harvesting

2009-08-28 Thread Eric Shubert
Did you install kernel-xen-devel ?? There will be a new unionfs implementation for qtp-newmodel released soon, probably by the end of next week. You might just want to wait for that. This unionfs is implemented with FUSE (Filesystem in USEr space), so it's a bit more independent of the

Re: [qmailtoaster] re: harvesting

2009-08-28 Thread Maxwell Smart
I do use OSSEC. Do you have a particular page that discusses this and how to set it up for blocking? or at least where I can read up on it? CJ Constantin IOAJA wrote: Maxwell Smart wrote: Greetings fellow Qmailers, I am trying to find a way to block harvesters. I am using Fail2ban, but

Re: [qmailtoaster] re: harvesting

2009-08-28 Thread Constantin IOAJA
Maxwell Smart wrote: I do use OSSEC. Do you have a particular page that discusses this and how to set it up for blocking? or at least where I can read up on it? CJ Nope ! Only OSSEC site. http://www.ossec.net/wiki/index.php/FAQ http://www.ossec.net/main/manual/manual-faq/

Re: [qmailtoaster] re: harvesting

2009-08-28 Thread Maxwell Smart
I found out what was happening. My notifications were being blocked by my SpamDyke. :( CJ Constantin IOAJA wrote: Maxwell Smart wrote: I do use OSSEC. Do you have a particular page that discusses this and how to set it up for blocking? or at least where I can read up on it? CJ Nope

RE: [qmailtoaster] re: harvesting

2009-08-28 Thread Ole N.Johansen
:40 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] re: harvesting Maxwell Smart wrote: Greetings fellow Qmailers, I am trying to find a way to block harvesters. I am using Fail2ban, but must not have it set up correctly to block the harvesters after 3 attempts. If anyone

Re: [qmailtoaster] re: harvesting

2009-08-28 Thread Eric Shubert
@qmailtoaster.com *Subject:* Re: [qmailtoaster] re: harvesting Maxwell Smart wrote: Greetings fellow Qmailers, I am trying to find a way to block harvesters. I am using Fail2ban, but must not have it set up correctly to block the harvesters after 3 attempts. If anyone can shed some light

Re: [qmailtoaster] re: harvesting

2009-08-28 Thread Maxwell Smart
-alfa.ro] *Sent:* 28. august 2009 21:40 *To:* qmailtoaster-list@qmailtoaster.com *Subject:* Re: [qmailtoaster] re: harvesting Maxwell Smart wrote: Greetings fellow Qmailers, I am trying to find a way to block harvesters. I am using Fail2ban, but must not have it set up correctly to block