Corey H via Postfix-users:
> Hello list,
>
> I saw many logs like this in our server log,
>
> Aug 9 19:48:27 mx postfix/submission/smtpd[3731732]: warning:
> unknown[5.31.8.57]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
> Aug 9 19:48:27 mx postfix/submission/smtpd[3731732]: too many errors
> after AUTH from unknown[5.31.8.57]
>
> Since system has warned that "too many errors after AUTH ", is there a
> policy setup to stop this kind of IP? i know fail2ban, but that's a
> standalone service, not integrated into postfix itself.
It's not built into Postfix because solutions like fail2ban exist.
Welcome to the UNIX philosophy. Less is better.
Wietse
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
