Date:  Wed, 12 Aug 2009 23:34:42 +1000
From:  Xin CHEN <xchen (at mark) housleyconsulting.com.au>
Subject:  [coba-e:15878] Re: Block Hacker IP from BQ and BX Server
To:  coba-e (at mark) bluequartz.org
Message-Id:  <6E3572D0-E1D1-4B56-928F-2B137C73BA17 (at mark) housleyconsulting.com.au>
In-Reply-To:  <C81E2DF7ABD74911BB472BEC43ABD0A2@HP9925NR>
References:  <2DAB4EF3-1B30-4A80-9B28-05C1CAC2B271 (at mark) housleyconsulting.com.au> <BAY107-W428D49C8AE2A6E64E87003D1070 (at mark) phx.gbl> <C81E2DF7ABD74911BB472BEC43ABD0A2 (at mark) HP9925NR>
X-Mail-Count: 15878

Thanks guys!
All these information are great - definitely try them on.

Cheers,
xin

On 12/08/2009, at 9:32 AM, Darrell D. Mobley wrote:

>> -----Original Message-----
>> From: Tom W [mailto:midintertech (at mark) hotmail.com]
>> Sent: Tuesday, August 11, 2009 5:35 PM
>> To: coba-e (at mark) bluequartz.org
>> Subject: [coba-e:15876] Re: Block Hacker IP from BQ and BX Server
>>
>> We have been using dfix.sh for quite awhile and it seems to
>> work pretty good for this also. We have also played with
>> deny.hosts and fail2ban when we needed to block other
>> types of services. But if you just need something for dovecot
>> dfix works pretty good, I think it watchs/blocks a few other
>> type attacks also. Good Luck!
>
> I've been using DFix as well, but the other day I got an POP3 attack  
> that
> DFix did nothing with.  Isn't DFix supposed to address that sort of  
> attack?
>