mailop--- via mailop skrev den 2025-03-06 23:27:

I find it amazing that only 24 hours after setting it up on a brand
new ip address at port 587 I am already getting sasl auth brute force
attempts from about 15 different servers.

you know your custommers ?, then reduce ipranges thay can use, all else is firewalled out

If a tool like this already exists, could someone point me at it.  I'm
planning to open source this after a few more refinements.

fail2ban with abuseipdb reporting works for me

customm filter for postscreen, and other type of bot activited missing in fail2ban

_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to