Autor: Sebastian Nielsen Data: Para: 'Mailing List' Asunto: Re: [exim] Closing off Port to non-SSL traffic
>>Tedious, isn't it. I get probed by 5000 hosts per day. I've now set
fail2ban to "one strike and you're out".
I solved that with:
auth_advertise_hosts = 192.168.0.0/16 : 127.0.0.1 : ::::1
Then it doesn't matter if they have the correct password, they wont get
access anyways...
Looks like this in logs:
2022-06-10 23:50:20 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-10 23:59:58 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 00:06:16 SMTP protocol error in "AUTH LOGIN" H=(User)
[212.192.241.44] AUTH command used when not advertised
2022-06-11 00:09:27 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 00:19:11 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 00:25:08 SMTP protocol error in "AUTH LOGIN" H=(User)
[212.192.241.44] AUTH command used when not advertised
2022-06-11 00:28:34 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 00:38:17 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 00:44:11 SMTP protocol error in "AUTH LOGIN" H=(User)
[212.192.241.44] AUTH command used when not advertised
2022-06-11 00:47:41 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 00:57:24 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 01:03:20 SMTP protocol error in "AUTH LOGIN" H=(User)
[212.192.241.44] AUTH command used when not advertised
2022-06-11 01:06:49 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 01:16:32 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 01:23:54 SMTP protocol error in "AUTH LOGIN" H=(User)
[212.192.241.44] AUTH command used when not advertised
2022-06-11 01:25:56 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 01:35:34 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 01:45:01 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 01:51:10 SMTP protocol error in "AUTH LOGIN" H=(User)
[212.192.241.44] AUTH command used when not advertised
2022-06-11 01:54:40 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 02:04:08 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 02:06:05 SMTP protocol error in "AUTH LOGIN" H=(User)
[212.192.241.44] AUTH command used when not advertised
2022-06-11 02:13:46 SMTP protocol error in "AUTH LOGIN" H=(User)
[45.85.190.59] AUTH command used when not advertised
2022-06-11 02:20:29 SMTP protocol error in "AUTH LOGIN" H=(User)
[212.192.241.44] AUTH command used when not advertised