Am Sat, 8 Mar 2025 04:13:56 +0100
schrieb "Kai 'wusel' Siering via mailop" <mailop@mailop.org>:

> Am 07.03.25 um 10:46 schrieb Marco Moock via mailop:
> > Am 06.03.2025 um 15:27:54 Uhr schrieb mailop--- via mailop:
> >   
> >>     6. If auth failed it drops message, but says it was delivered  
> […]
> > Slowing down stuff is also nasty in my opinion. I use fail2ban and
> > if too many failed login attempts are being logged, the IP will be
> > banned for some hours.  
> 
> So you're not using IPv6 yet?

I use it, but I haven't seen any mail abuse yet on it. All on IPv4.

> Facing a /64, how many failures of a single IP should trigger a ban?

I would only list the single IP and if too many come from that /64, I
would escalate the ban to the entire /64.

I haven't implemented that yet.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to