Re: Blacklist IP with a reject message

2013-06-26 Thread Abhijeet Rastogi
Hi Jan, Thanks for the reply. I don't want to use file as it'll be hard for me to sync the same file across multiple servers. (Well, I could use nfs etc but I don't want to). As Tom suggested, it seems like the good way of doing it. Thanks for that. On Wed, Jun 26, 2013 at 4:34 PM, Jan P. Kessle

Re: Blacklist IP with a reject message

2013-06-26 Thread Jan P. Kessler
3. I could also write a policy server. Is there already a policy server that's as simple as blocking IPs based on a ACL. But then, I'll have to run a local mysql server also. postfwd has an option to use a table, which will be re-read on every request. Look for "lfile" or "ltable" at http:/

Re: Blacklist IP with a reject message

2013-06-26 Thread Tom Hendrikx
On 06/26/2013 08:11 AM, Abhijeet Rastogi wrote: > Hi all, > > Straight to the point, I ban IPs using fail2ban based on 4 jails. The > reasons vary from bruteforce sasl login attacks from specific IPs to > number of attempts to send suspect/confirmed spam mails. Right now, > there is a iptables rul

Blacklist IP with a reject message

2013-06-25 Thread Abhijeet Rastogi
Hi all, Straight to the point, I ban IPs using fail2ban based on 4 jails. The reasons vary from bruteforce sasl login attacks from specific IPs to number of attempts to send suspect/confirmed spam mails. Right now, there is a iptables rule that starts dropping packets for a IP. This is highly unde