Topic: Dovecot - Protection contre la force brute ?

[Jean-Philippe Pialasse]

tu as besoin de configurer geoip pour que xt_geoip puisse fonctionner car ce dernier a besoin des bases de données de maxmind dans un format specifique.

[ReetP]

^^^^^^^^^

What he said

[lurey]

…actuellement, c'es donc GeIP qui tourne sur mon serveur, installé et configuré selon les indications du wiki correspondant, à savoir (après avoir ouvert un compte Maxmind:

[root@serveur]# yum install smeserver-geoip --enablerepo=smecontribs
[root@serveur]# db configuration setprop geoip LicenseKey [mon n° de licence] AccountID [mon ID]
[root@serveur]# expand-template  /etc/GeoIP.conf
[root@serveur]# signal-event geoip-update
[root@serveur]# config setprop qpsmtpd BadCountries BR,CN,CR,DZ,IL,IN,JP,KR,LT,MZ,MX,NA,PE,PL,RU,TW,UY
( > pour ajouter un pays, il faut remettre toute la liste à la suite de cette commande)
[root@serveur]# signal-event email-update

Je crois comprendre que le moteur est le même pour XT-GeoIP, un peu comme si XT- mettait une "couche supplémentaire" à GeIP ? ...excusez-moi si mes approximations sont absurdes, c'est pour moi une manière d'interpréter la logique de

I think they co-exist so you will be fine.It should tell you if they clash.
You do not need to uninstall anything.

Est-ce à dire que les éléments rentrés en db vont être repris lors de l'install de XT- … ou vont être écrasés ?
Et donc à cette indication :

tu as besoin de configurer geoip pour que xt_geoip puisse fonctionner car ce dernier a besoin des bases de données de maxmind dans un format specifique.

Ma question est : quoi de plus (ou de différent) de ce qui est déjà fait à l'install de la version (simple) de GeoIP ?

Merci de votre soutien !

[ReetP]

Standard GeoIP adds the Maxmind DBs and enables geoip support directly in qpsmtpd via a qpsmtpd plugin.

Xt_geoip adds a kernel module and blocks countries via iptables and service port so it can block other servicees beyond just mail eg ssh, imap etc.

[lurey]

OK,
So if xt- is installed, it can block several services - including those that the standard version can block (mail)
? Then, if I install xt-geoip, standard-geoip becomes useless  ...Or How is it interesting that they coexist?
( Possibly to stay protected while installing and configuring xt-geoip ? but in that case, could afterwards-uninstalling (standard-)geoip corrupt Xt-geoip's installation?
...
And I don't know how to understand JPh.Pialasse's "you need to configure geoip for xt-geoip to work because the latter needs maxmind databases in a specific format."...
- I imagine that I'll use the same account at Maxmind.
- in Xt-geoip wiki, Key and ID are registred with the same command I made for (standard)geoip :

# db configuration setprop geoip LicenseKey [mon n° de licence] AccountID [mon ID]
(...and I already have:)
# config show geoip
geoip=service
   AccountID=my ID
   LicenseKey=my licence n°
   status=enabled

Will installing Xt-geoip overwrite this? or use this command differently...?

...sorry for my bad-google-english (...and clumsy attempts to understand despite little skills! )

[ReetP]

Your Franglish is fine

Mejor que mi Frances.... 

smeserver-geoip will handle the Maxmind DBs which xt needs to use.

They can coexist as they do things differently.

As I said, Geoip works via a qpsmtpd plugin.

Xt_Geoip works via a kernel module + iptables. It uses the GeoIP key information.

If you run xt then the qpsmtpd plugin will just do less work!!

Both use the same Maxmind database.

So don't panic and have them both. It's fine.

Do yourself a favour, get the CVS code for the contribs and look at it to see what they do.

It will help you to understand.

[lurey]

(...)So don't panic and have them both. It's fine.

I just followed your advice, and did install Xt-Geoip !

No error message.
Maxmind registration stayed.
BadContries for qpsmtp stayed.
> I just had to add BadContries for services other than qpsmtp. (easy to do with Geoip page in the server-manager, / Merci Gieres pour les traductions fr ! )
I still need to explore the different possibilities and configuration parameters

Do yourself a favour, get the CVS code for the contribs and look at it to see what they do.
It will help you to understand.

I did'nt... at that time.
I first started by looking for the meaning of "CVS"  , found a link to the page https://viewvc.koozali.org/smecontribs/rpms/, saw "sme-geoip/contribs10" (but no Xt-geoip)...
but I haven't figured out how to use your good and friendly advice yet...
I will try again with more free time, especially since the language is still a handicap for me, already to understand how to use the  offered tools(even when for you, it appears obvious because you use them regularly).
...and, I fear that I lack too much basic knowledge for trying to read and understand codes and links between program elements !

Have a good evening