Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #269430

Re: Knocking on the door

Show all headers | View raw

On Fri, 17 May 2024 15:49:52 +0200
Maurizio Caloro <maurizio@caloro.ch> wrote:

>  
> 
> Hello
> 
> 
> Please i know that this arn't the Dovecot forum, but let me try, on
> the log's i have always knocking "unknown user" attempts.
> 
> 
> > May 15 22:39:31 Dovecot/auth-worker(2602036): Info: conn
> > unix:auth-worker (pid=2602030,uid=113):
> > auth-worker<49>:sql(bin@domain.ch,194.169.175.10): unknown user

I only see one record here. fail2ban requires multiple attempts within
a certain period before it will ban the source address. 


> 
> 
> yes i try with fail2ban, but i didn't see or found the right regex,
> so that this will be blocked please has any from you solve this
> knocking task?

Are you sure you want to worry about it? dovecot seems to be doing its
job by refusing access to unknown users.

If you see repeated attempts from the same source, you might want to
craft a firewall rule to ban that source (or than network).

Show us the files you have modified so we can see what you are doing.

> 
> 
> thanks
> 
>  
> 
> 
> Von meinem iPhone gesendet
> 



-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Knocking on the door Maurizio Caloro <maurizio@caloro.ch> - 2024-05-17 16:00 +0200
  Re: Knocking on the door Charles Curley <charlescurley@charlescurley.com> - 2024-05-17 18:50 +0200
    AW: Knocking on the door "Maurizio Caloro" <maurizio@caloro.ch> - 2024-05-18 15:30 +0200

csiph-web