Re: [exim] Block access to certain IPs

Pàgina inicial
Delete this message
Reply to this message
Autor: Richard Lithvall
Data:  
A: exim-users
Assumpte: Re: [exim] Block access to certain IPs
> On Thu, Nov 22, 2012 at 08:07:12AM -0300, Jorge wrote:
> > Daily I found in rejectlog file hundreds of lines like:
> >
> > 2012-mm-dd hh: mm: ss fixed_login authenticator failed for
> > ([www.xxx.yyy.zzz]) [ww.xx.yyy.zz]: 535 Incorrect authentication data
> > (set_id = xyz)
> >
> > And in most of them the IP is the same.
> >
> > How I can prevents access to EXIM of those IPs?


On Fri, Nov 23, 2012 at 07:48:43AM +0000, Bernard Hurley wrote:
> On my Debian system I block IP's using iptables like this:
>
>      iptables -A INPUT -s XX.XX.XX.XX -p tcp --dport 25 -j REJECT


...and if you want this automated you can use fail2ban
http://www.fail2ban.org

/Richard