Displaying 1 result from an estimated 1 matches for "imap_tcp_bf_svc".
Did you mean:
imap_tcp_bf_svcs
2007 Apr 08
2
IP Tables block for POP3 attacks with Dovecot
Has anyone implemented a script to block IPs which are attacking on POP3
ports using dovecot logs to indicate repetitive failed login attempts?
sshblack does this nicely for ssh (port 22) attacks by monitoring the
/var/log/secure file. I am considering rewriting this to POP3 port
(110), but if it has already been done, I sure don't need the practice.
Thanks!