Re: denying mail relay + iptables rule

2007-02-13 Thread Felipe Figueiredo
On Tuesday 13 February 2007 16:48:10 martin f krafft wrote: > also sprach Felipe Figueiredo <[EMAIL PROTECTED]> [2007.02.13.1837 +]: > > I am currently using 0.6.1-7 from backports, is this the > > deprecated version you meant? > > Yes, but if you go through the trouble of creating the rules,

Re: denying mail relay + iptables rule

2007-02-13 Thread martin f krafft
also sprach Felipe Figueiredo <[EMAIL PROTECTED]> [2007.02.13.1837 +]: > I am currently using 0.6.1-7 from backports, is this the > deprecated version you meant? Yes, but if you go through the trouble of creating the rules, it won't be very hard to migrate. I can help you then. -- Please do

Re: denying mail relay + iptables rule

2007-02-13 Thread Felipe Figueiredo
On Tuesday 13 February 2007 10:48:28 martin f krafft wrote: > but do try to go with fail2ban from etch, since sarge's configuration is > deprecated. Can't do because of a dependecy hell over sarge's 2.4 being old enough. Etch's fail2ban version is 0.7.5-2 and sarge doesn't even have it. I am

Re: denying mail relay + iptables rule

2007-02-13 Thread martin f krafft
also sprach Felipe Figueiredo <[EMAIL PROTECTED]> [2007.02.13.1238 +]: > I would like to take further measures and add the offender's ip to > a blacklist, in a similar way as fail2ban do to ssh, i.e., block > access from it temporarily. You can use fail2ban for this. Once you created the rules

denying mail relay + iptables rule

2007-02-13 Thread Felipe Figueiredo
Hello, I get, on an almost daily basis, attempts of use of my mail server as a relay. Since it (postfix) only accepts relay from authenticated clients (or from local), these attempts are usually logged and denied. I would like to take further measures and add the offender's ip to a blacklist,