[BlueOnyx:09184] Re: has to be a better way

[Arbalister]

I use Dfix and Denyhosts - theres an older version of dfix in this free
package from Compass -
http://www.compassnetworks.com.au/shop/free-bundle-p-78.html

That package lists Denyhosts, too, but I think I actually installed it
through Yum...



On Thu, Nov 17, 2011 at 1:52 PM, <cwallace at wcnet.org> wrote:

> i keep getting ppl tryin to hack my blueonyx server.
> examples:
> dovecot: pop3-login: Disconnected (auth failed, 1 attempts):
> user=<aaron at go2ccc.net>, method=PLAIN, rip=86.122.172.81,
> lip=192.168.1.10: 2 Time(s)
>    dovecot: pop3-login: Disconnected (auth failed, 1 attempts):
> user=<abby at go2ccc.net>, method=PLAIN, rip=86.122.172.81,
> lip=192.168.1.10: 2 Time(s)
>
>  Refused Connections:
>    Service dovecot:
>       65.67.57.241: 916 Time(s)
>       74.39.186.2: 1018 Time(s)
>       86.122.172.81: 426 Time(s)
> this is getting to be real bad and need to come up with a better solution
> then iptables because it seems to slow the server down now with all the
> ips i have in my block list
> here is an example ip table command i use:
> /sbin/iptables -A INPUT -s 65.67.57.241 -j DROP
>
> pam doesnt seem to stop the flooding and when they get where it aproching
> 9000 times it brings blueonyx to a halt.
> thanks in advance for any recomendation.
>
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20111207/8af7b076/attachment.html>