I saw something similar to this on my mail server about 3 months ago. I ran the ip address via whois and I was under a dictionary attack from a server in China. I put a rule on my firewall to drop the connections from the ip address range that was returned in the whois check and stopped it. Guy
On Tue, Jan 13, 2009 at 2:48 PM, mouss <mo...@ml.netoyen.net> wrote: > Ralf Hildebrandt a écrit : > > * Rupert Reid <isingl...@madasafish.com>: > >> My postfix log is being inundated. What does it mean and how can I > block > >> this ip (do I need to)? > > > > That is not postfix, but ipop3d > > People seem to be logging in and out. Seems normal for a mailserver, > > if you ask me. > > > > too many users with 'a' as first letter, and machine is in the US while > OP is in UK. so either OP munged things, or his server is under attack. > > anyway, as you said, not a postfix issue. > > -- 73 Guy Story KC5GOI kc5...@gmail.com
