Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #210223

Re: blocking 465 connections to mail server for specific IP address without using fail2ban

From john doe <johndoe65534@mail.com>
Newsgroups linux.debian.user
Subject Re: blocking 465 connections to mail server for specific IP address without using fail2ban
Date 2019-06-22 10:40 +0200
Message-ID <ybJIZ-7Qn-5@gated-at.bofh.it> (permalink)
References <ybIDf-7eg-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


> Hi,
>
> I've blacklisted quite a number of IP addresses and CIDR blocks from
> delivering email to my server with entries in the
> /etc/exim4/local_host_blacklist file.
>
> Is there any config file that I can easily use to block 465 login
> attempts from bad IP addresses and CIDR blocks?
>
> If there is no simple config file, what can I do without resorting to
> use of fail2ban so that I can use a curated list of blocked IP
> addresses.  I'm not sure I want to use iptables for this either.
>
> I /may/ end up blocking the IPs at the firewall (OPN Sense) level yet.
>
>

Instead of files, I probably would use 'ipset', that way, you can use
the ipset in exim iptables ...

--
John Doe

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

blocking 465 connections to mail server for specific IP address  without using fail2ban Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-22 09:30 +0200
  Re: blocking 465 connections to mail server for specific IP address  without using fail2ban john doe <johndoe65534@mail.com> - 2019-06-22 10:40 +0200
    Re: blocking 465 connections to mail server for specific IP address  without using fail2ban Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-22 16:20 +0200
      Re: blocking 465 connections to mail server for specific IP address  without using fail2ban Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-22 16:40 +0200
        Re: blocking 465 connections to mail server for specific IP address  without using fail2ban Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-23 00:10 +0200

csiph-web