Hi Remo,
Have too many ip's to manually block.
Some 12000+ so far. Trying to script a log
scnner to locate CHKUSER then copy ip and use
iptables to block.
regards
Tony White
On 5/2/25 00:55, Remo Mattei wrote:
Iptables?
Block the ip
Sent from my iPhone
> On Feb 4, 2025, at 13:25, Tony White <t...@ycs.com.au> wrote:
>
> Hi,
> I have come to realise this is a battle I cannot win.
> A quick fix I did was edit the tcp.smtp to CHKUSER_WRONGRCPTLIMIT="3"
> and rebuild the tcp file.
>
> Seems to be working well enough but it frustrating though.
>
> regards
> Tony White
>
>
> On 4/2/25 22:28, b...@whitesindia.com wrote:
>> Hi Tony,
>>
>>
>> Are you using fail2ban? That helps to block usernotfound and password fails.
>>
>>
>> You can also use spamdyke to black list the domains and Ips
>>
>>
>>
>> Some more info about what kind of attack you are facing can help in finding
solutions.
>>
>>
>>
>> Biju Jose
>> Mobile : 989 5990 272
>>
>>
>>
>>
>>
>>
>>
>> From: Tony White<t...@ycs.com.au>
>> Sent: 04 February 2025 16:43
>> To:qmailtoaster-list@qmailtoaster.com
>> Subject: [qmailtoaster] a single domain on my server is under attack
>>
>>
>>
>> Hi Folks,
>> Can someone please suggest how to stop/slow/reject this issue to a single
domain?
>> I have slowed it as far as I can but cannot stop it.
>>
>> TIA :(
>>
>>
>>
>
