Re: Dealing with failed AUTH attempts/attacks

2015-06-20 Thread Noel Jones
On 6/20/2015 1:23 PM, Forrest wrote: > How are others handling dictionary attacks (AUTH) with Postfix. For > example: > disable AUTH on port 25, or at least require encryption with smtpd_tls_auth_only = yes". Better to just disable it. require encryption on submission service port 587 with -

Re: Dealing with failed AUTH attempts/attacks

2015-06-20 Thread Viktor Dukhovni
On Sat, Jun 20, 2015 at 02:23:59PM -0400, Forrest wrote: > How are others handling dictionary attacks (AUTH) with Postfix. For > example: Disable SASL auth on port 25. On port 587 require TLS before AUTH. > I've limited the number of connections, and I suppose I could just ignore > these as th

Re: Dealing with failed AUTH attempts/attacks

2015-06-20 Thread J. Echter
Am 20.06.2015 um 20:23 schrieb Forrest: How are others handling dictionary attacks (AUTH) with Postfix. For example: Jun 19 21:28:24 mail postfix/smtpd[32583]: connect from unknown[212.131.132.49] Jun 19 21:28:24 mail postfix/smtpd[32583]: lost connection after AUTH from unknown[212.131.132.

Dealing with failed AUTH attempts/attacks

2015-06-20 Thread Forrest
How are others handling dictionary attacks (AUTH) with Postfix. For example: Jun 19 21:28:24 mail postfix/smtpd[32583]: connect from unknown[212.131.132.49] Jun 19 21:28:24 mail postfix/smtpd[32583]: lost connection after AUTH from unknown[212.131.132.49] Jun 19 21:28:24 mail postfix/smtpd[32