Hi Jan,
Thanks for the reply. I don't want to use file as it'll be hard for me to
sync the same file across multiple servers. (Well, I could use nfs etc but
I don't want to).
As Tom suggested, it seems like the good way of doing it. Thanks for that.
On Wed, Jun 26, 2013 at 4:34 PM, Jan P. Kessle
3. I could also write a policy server. Is there already a policy
server that's as simple as blocking IPs based on a ACL. But then, I'll
have to run a local mysql server also.
postfwd has an option to use a table, which will be re-read on every
request. Look for "lfile" or "ltable" at
http:/
On 06/26/2013 08:11 AM, Abhijeet Rastogi wrote:
> Hi all,
>
> Straight to the point, I ban IPs using fail2ban based on 4 jails. The
> reasons vary from bruteforce sasl login attacks from specific IPs to
> number of attempts to send suspect/confirmed spam mails. Right now,
> there is a iptables rul
Hi all,
Straight to the point, I ban IPs using fail2ban based on 4 jails. The
reasons vary from bruteforce sasl login attacks from specific IPs to number
of attempts to send suspect/confirmed spam mails. Right now, there is a
iptables rule that starts dropping packets for a IP. This is highly
unde