Greetings, Per the subject line, how does pop3 get tcp-wrapped when using dovecot? More specifically, when blocking email and (still) using sendmail, entries in /etc/hosts.deny look something like: sendmail: xxx.xxx. etc (depending on the depth/degree) for vsftpd it's vsftpd: xxx.xxx (where the x's are parts of an octet) for sshd it's sshd: xxx.xxx for pop3/dovecot it's? ????: xxx.xxx I'm concerned about what is to the left of the colon (":"), not to the right. Is it a dovecot.conf configuration also? Much thanks, Max Pyziur pyz at brama.com
I remember on the left side of the colon, it should be the name of the daemon. Then, tcp-wrapped is able to map it. So, just have to find out what the name of the process is. ------------ Banyan He Blog: http://www.rootong.com Email: banyan at rootong.com On 4/1/2013 4:37 AM, Max Pyziur wrote:> Greetings, > > Per the subject line, how does pop3 get tcp-wrapped when using dovecot? > > More specifically, when blocking email and (still) using sendmail, entries > in /etc/hosts.deny look something like: > sendmail: xxx.xxx. etc (depending on the depth/degree) > > for vsftpd it's > vsftpd: xxx.xxx (where the x's are parts of an octet) > > for sshd it's > sshd: xxx.xxx > > for pop3/dovecot it's? > ????: xxx.xxx > > I'm concerned about what is to the left of the colon (":"), not to the > right. > > Is it a dovecot.conf configuration also? > > Much thanks, > > Max Pyziur > pyz at brama.com > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos >
http://blog.acsystem.sk/linux/brute-force-attack-dovecot-imap-server-blocking-ip-with-tcp-wrappers so, I think that process name is pop3. remember to check that dovecot is compiled to support tcp wrappers. Eero 2013/3/31 Max Pyziur <pyz at brama.com>> > Greetings, > > Per the subject line, how does pop3 get tcp-wrapped when using dovecot? > > More specifically, when blocking email and (still) using sendmail, entries > in /etc/hosts.deny look something like: > sendmail: xxx.xxx. etc (depending on the depth/degree) > > for vsftpd it's > vsftpd: xxx.xxx (where the x's are parts of an octet) > > for sshd it's > sshd: xxx.xxx > > for pop3/dovecot it's? > ????: xxx.xxx > > I'm concerned about what is to the left of the colon (":"), not to the > right. > > Is it a dovecot.conf configuration also? > > Much thanks, > > Max Pyziur > pyz at brama.com > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos >