Should I block 1 address or subnet? On Wed, Jul 29, 2009 at 7:05 PM, Seth Mattinen <se...@rollernet.us> wrote:
> Roman Gelfand wrote: > > It looks like somebody is trying to figure out my internal users as > > evidenced by log excerpts below. Is there something I could do to, if > > not prevent this, reduce it? > > > > > You could use fail2ban to look for too many "RCPT from unknown" entries > and block the IP address. > > ~Seth >
