Ralf Hildebrandt a écrit :
> * mouss <mo...@ml.netoyen.net>:
>
>> too many users with 'a' as first letter, and machine is in the US while
>> OP is in UK. so either OP munged things, or his server is under attack.
>>
>> anyway, as you said, not a postfix issue.
>
> One could fail2ban the attacker :)
>
and if the probes use multiple TCP connections (if the pop server
disconnects after a failure), then he can use rate limiting in his
packet filter if supported ("recent" in iptables, "overload" in pf).
