LFD isn't blocking dovecot login failures

Post Reply
ttremain
Junior Member
Posts: 28
Joined: 29 Jun 2007, 07:23
Contact:

LFD isn't blocking dovecot login failures

Post by ttremain »

This IP is pounding one of our servers

These are from exim_mainlog:

Code: Select all

2020-02-26 17:50:18 dovecot_login authenticator failed for ([x.y.z.z]) [x.y.z.z]:49078: 535 Incorrect authentication data
2020-02-26 17:50:20 dovecot_login authenticator failed for ([x.y.z.z]) [x.y.z.z]:43772: 535 Incorrect authentication data
2020-02-26 17:50:24 dovecot_login authenticator failed for ([x.y.z.z]) [x.y.z.z]:19374: 535 Incorrect authentication data
2020-02-26 17:50:25 dovecot_login authenticator failed for ([x.y.z.z]) [x.y.z.z]:36636: 535 Incorrect authentication data
I have:
SMTPAUTH_LOG = "/var/log/maillog"
POP3D_LOG = "/var/log/maillog"
IMAPD_LOG = "/var/log/maillog"

The IP x.y.z.z doesn't seem to be in /var/log/maillog at all.

Confused. Please advise!

Post Reply