[assp_auth_failure]
# Ignore failures on our local networks
ignoreip = 127.0.0.1 172.21.0.0/16 192.168.0.0/16 10.0.0.0/24
enabled = true
port = smtp,ssmtp
filter = assp_auth_failure
action = iptables-multiport[name=ASSP_AUTH, port="25,587", protocol=tcp]
sendmail-whois[name=ASSP_AUTH, dest=supportemailaddress]
logpath = /assp/logs/maillog.txt
# Monitor failures within a 7 day period
findtime = 10080
# Ban for 7 days
bantime = 10080
# 5 failures from a single IP address within $findtime will cause the ban
maxretry = 5
Doug
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test