Hi, Jan 27 13:02:37 h2786452 postfix-out/smtpd[8469]: disconnect from unknown[193.56.28.30] ehlo=1 auth=0/1 quit=1 commands=2/3 Jan 27 13:02:58 h2786452 postfix-out/smtpd[8469]: disconnect from unknown[193.56.28.30] ehlo=1 auth=0/1 quit=1 commands=2/3 Jan 27 13:03:24 h2786452 postfix-out/smtpd[8469]: disconnect from unknown[193.56.28.30] ehlo=1 auth=0/1 quit=1 commands=2/3 Jan 27 13:03:44 h2786452 postfix-out/smtpd[8469]: disconnect from unknown[193.56.28.30] ehlo=1 auth=0/1 quit=1 commands=2/3 Jan 27 13:04:09 h2786452 postfix-out/smtpd[8469]: disconnect from unknown[193.56.28.30] ehlo=1 auth=0/1 quit=1 commands=2/3
Before I block with fail2ban, does auth=0/1 ALWAYS mean that s/o tried to use smtp without authentication? Thank you!
