Am Sat, 8 Mar 2025 04:13:56 +0100 schrieb "Kai 'wusel' Siering via mailop" <mailop@mailop.org>:
> Am 07.03.25 um 10:46 schrieb Marco Moock via mailop: > > Am 06.03.2025 um 15:27:54 Uhr schrieb mailop--- via mailop: > > > >> 6. If auth failed it drops message, but says it was delivered > […] > > Slowing down stuff is also nasty in my opinion. I use fail2ban and > > if too many failed login attempts are being logged, the IP will be > > banned for some hours. > > So you're not using IPv6 yet? I use it, but I haven't seen any mail abuse yet on it. All on IPv4. > Facing a /64, how many failures of a single IP should trigger a ban? I would only list the single IP and if too many come from that /64, I would escalate the ban to the entire /64. I haven't implemented that yet. _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop