michal krajcirovic wrote:
> Hello,
> addresses the delicate problem :-) The customer has on our mailserver
> your domain, there about 10 mailboxes. The problem is that the
> connections are constantly on the pop3/imap/smtp
> ran...@customerdomain.cz. That sometimes appears the attack is normal,
> but this problem more than a month, for example, now over 12 hours we
> have more than 340 000 invalid login (or attempting to them) to an
> invalid address.
>
> I installed fail2ban, but the problem persists, the majority of the IP
> request comes just a few.
>
> Can someone have a solution?
>
I'm not sure what exactly is the problem. Do the attempts come from
different IPs, only a small number of attempts per IP?
If this is the case, then there isn't much you can do, unless the IPs
come from the same ranges (say all 1.2.3.XX), in case you can block the
whole ranges manually.
--
Linux is obsolete
-- Andrew Tanenbaum
Eduardo M KALINOWSKI
edua...@kalinowski.com.br
--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
