Re: blocking 465 connections to mail server for specific IP address without using fail2ban
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
The script needs more work.... it is not exim4-exploiters, it is for
repeated failed logins.
As it is now, it will treat any single failure as one to ban and that
is only going to cause trouble. Although users should be logged in
normally and will likely have passwords saved in their clients so when
they try to send emails, they can only do so as authenticated and they
will be properly authenticated every time unless they are manually
logging in to simple do an smtp auth send.... so it might not be so
bad, I may just need to rename the ipsets, but I'll think about it
some more.
Anyway, it's a good start.
Cheers
A.
-----BEGIN PGP SIGNATURE-----
iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCXQ6lgwAKCRCoFmvLt+/i
+0d1AP9tNbfrC62Ts/dWoDFaGH18qa05IvvUyiZnIb82zZtN4gEAoKNToikHpnaW
DQuxWFxLjruS3NWgMIKv/H3xiXZsqRE=
=JJ18
-----END PGP SIGNATURE-----
Reply to: