Date:  Tue, 30 Sep 2008 07:39:32 -0400
From:  Abdul-Rashid Abdullah <webmaster (at mark) muntada.com>
Subject:  [coba-e:14127] Re: Dovecot Attack
To:  "coba-e (at mark) bluequartz. org" <coba-e (at mark) bluequartz.org>
Message-Id:  <C5078834.33919%webmaster (at mark) muntada.com>
In-Reply-To:  <48E1F556.6030402 (at mark) dogsbody.org>
X-Mail-Count: 14127

Yes, I have the format and thanks for the lead on the bug.  I will follow-up
on that.

What helped me finally is I changed my iptables command from an append to an
insert and that did it.  I think one of the issues I have also is that the
hosts.deny table is too long.

-rashid


On 9/30/08 5:45 AM, "Dogsbody" <dan (at mark) dogsbody.org> wrote:

> 
>> Let me also provide a little but more information.  I added the IP also to
>> the hosts.deny file.  That didn't change anything.
> 
> Are you using the correct syntax in hosts.deny?  A line should look like...
> ALL: 65.69.251.9
> 
>> I tried to do a iptables restart but it basically hung up the system.
> 
> Sounds like you have the latest iptables/kernel bug, Read coba-e:14086
> in the mail archives for a fix to this.
> 
> Dan