Qmail
[Top] [All Lists]

Re: POP3 password scanning

To: qmail@list.cr.yp.to
Subject: Re: POP3 password scanning
From: Quinn Comendant <quinn@strangecode.com>
Date: Fri, 26 Jan 2007 15:06:43 -0800
Delivered-to: sp-com-lists@consult.net
Delivered-to: gmail-qmail@securepoint.com
Delivered-to: sp.com.list@gmail.com
Delivered-to: mailing list qmail@list.cr.yp.to
In-reply-to: <200701261039.33159@leverton.icritical.com>
Mailing-list: contact qmail-help@list.cr.yp.to; run by ezmlm
References: <20070125142447176214.67bfc7a3@strangecode.com> <200701261039.33159@leverton.icritical.com>
On Fri, 26 Jan 2007 10:39:25 +0000, Nick Leverton wrote:
> I know fail2ban has a configureable number of failures before it'll ban the 
> IP.  I have it installed but I'm not running it yet :)  Does it reset its 
> counter on a successful login ?  If so then just leave maxfailures in 
> fail2ban.conf as something greater than 2.

fail2ban has a lot of configurations. We're currently running it to ban any IP 
that makes 10 or more ssh connections in a 10 minute period, and if so the IP 
is blocked for 10 minutes.

Q

<Prev in Thread] Current Thread [Next in Thread>