Re: [exim] Stopping Bruteforceattacks

Pàgina inicial
Delete this message
Reply to this message
Autor: Gandalf Corvotempesta
Data:  
A: Mihamina Rakotomandimby
CC: exim-users
Assumpte: Re: [exim] Stopping Bruteforceattacks
Il giorno mer, 25/07/2012 alle 11.44 +0300, Mihamina Rakotomandimby ha
scritto:
> If me, I'd filter at IP level, based on some reject log information.
> That's the job of fail2ban, but I dont know if it parses Exim logs.



I'm using this regex in fail2ban with success:

failregex = \[<HOST>\] .*(?:rejected by local_scan|Unrouteable address|
535 Incorrect authentication data)