LFD isn't blocking dovecot login failures

Post Reply
ttremain
Junior Member
Posts: 29
Joined: 29 Jun 2007, 07:23
Contact:

LFD isn't blocking dovecot login failures

Post by ttremain »

This IP is pounding one of our servers

These are from exim_mainlog:

Code: Select all

2020-02-26 17:50:18 dovecot_login authenticator failed for ([x.y.z.z]) [x.y.z.z]:49078: 535 Incorrect authentication data
2020-02-26 17:50:20 dovecot_login authenticator failed for ([x.y.z.z]) [x.y.z.z]:43772: 535 Incorrect authentication data
2020-02-26 17:50:24 dovecot_login authenticator failed for ([x.y.z.z]) [x.y.z.z]:19374: 535 Incorrect authentication data
2020-02-26 17:50:25 dovecot_login authenticator failed for ([x.y.z.z]) [x.y.z.z]:36636: 535 Incorrect authentication data
I have:
SMTPAUTH_LOG = "/var/log/maillog"
POP3D_LOG = "/var/log/maillog"
IMAPD_LOG = "/var/log/maillog"

The IP x.y.z.z doesn't seem to be in /var/log/maillog at all.

Confused. Please advise!
scrupul0us
Junior Member
Posts: 9
Joined: 25 Nov 2016, 18:45

Re: LFD isn't blocking dovecot login failures

Post by scrupul0us »

You want:

Code: Select all

SMTPAUTH_LOG = "/var/log/exim_mainlog"
SMTPRELAY_LOG = "/var/log/exim_mainlog"
SCRIPT_LOG = "/var/log/exim_mainlog"
POP3D_LOG = "/var/log/maillog"
IMAPD_LOG = "/var/log/maillog"
...based on CentOS 7 w/cPanel
Post Reply