Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #210220

blocking 465 connections to mail server for specific IP address without using fail2ban

From Andrew McGlashan <andrew.mcglashan@affinityvision.com.au>
Newsgroups linux.debian.user
Subject blocking 465 connections to mail server for specific IP address without using fail2ban
Date 2019-06-22 09:30 +0200
Message-ID <ybIDf-7eg-3@gated-at.bofh.it> (permalink)
Organization linux.* mail to news gateway

Show all headers | View raw


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

I've blacklisted quite a number of IP addresses and CIDR blocks from
delivering email to my server with entries in the
/etc/exim4/local_host_blacklist file.

Is there any config file that I can easily use to block 465 login
attempts from bad IP addresses and CIDR blocks?

If there is no simple config file, what can I do without resorting to
use of fail2ban so that I can use a curated list of blocked IP
addresses.  I'm not sure I want to use iptables for this either.

I /may/ end up blocking the IPs at the firewall (OPN Sense) level yet.

- -- 
Kind Regards
AndrewM

Andrew McGlashan
-----BEGIN PGP SIGNATURE-----

iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCXQ3XpwAKCRCoFmvLt+/i
+1m2AQC3UI8NrRBM/Z1zoRWA4i6zQbyLbt0dGRsILlPHTTQp+wEAjN4S3rSewR3G
BdfMh0Uzir8r4IRtMuLKPAQ42mAEAHc=
=T3vu
-----END PGP SIGNATURE-----

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread


Thread

blocking 465 connections to mail server for specific IP address  without using fail2ban Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-22 09:30 +0200
  Re: blocking 465 connections to mail server for specific IP address  without using fail2ban john doe <johndoe65534@mail.com> - 2019-06-22 10:40 +0200
    Re: blocking 465 connections to mail server for specific IP address  without using fail2ban Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-22 16:20 +0200
      Re: blocking 465 connections to mail server for specific IP address  without using fail2ban Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-22 16:40 +0200
        Re: blocking 465 connections to mail server for specific IP address  without using fail2ban Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-23 00:10 +0200

csiph-web