Obsolete Releases > SME 8.x Contribs

Massive password attacks via qpsmtpd

<< < (3/3)

holck:
Done:

http://bugs.contribs.org/show_bug.cgi?id=8525

CharlieBrady:

--- Quote from: holck on August 12, 2014, 04:08:23 PM ---The login fails, as it should, but this time the qpsmtpd log file only shows


--- Code: ---2014-08-12 15:55:03.957949500 6756 Authentication failed for testuser -

--- End code ---

Notice the missing line from the logterse plugin. So no IP-address is logged, and fail2ban can't do anything.

--- End quote ---

You don't see the line from the logterse plugin because the conversation is still open - there has just been one failed authentication. If you add 'QUIT', as in your first connection, then you will see the logterse log.

Navigation

[0] Message Index

[*] Previous page