Index: [Article Count Order] [Thread]

Date:  Sat, 15 Aug 2009 09:37:45 +1000
From:  Greg Kuhnert <greg.kuhnert (at mark) theanchoragesylvania.com>
Subject:  [coba-e:15888] Re: Block Hacker IP from BQ and BX Server
To:  "Darrell D. Mobley" <dmobley (at mark) uhostme.com>
Cc:  coba-e (at mark) bluequartz.org
Message-Id:  <4A85F549.3020102 (at mark) theanchoragesylvania.com>
In-Reply-To:  <3150CA3E753A44FCB7A4498B71031BCE@HP9925NR>
References:  <2DAB4EF3-1B30-4A80-9B28-05C1CAC2B271 (at mark) housleyconsulting.com.au> <BAY107-W428D49C8AE2A6E64E87003D1070 (at mark) phx.gbl> <C81E2DF7ABD74911BB472BEC43ABD0A2 (at mark) HP9925NR> <4A8333EF.1040905 (at mark) theanchoragesylvania.com> <4AC0EE4443374853B240370C4E373A02 (at mark) HP9925NR> <5D1AFDCEFF6842F0A19B3AC3A086C636 (at mark) HP9925NR> <3150CA3E753A44FCB7A4498B71031BCE (at mark) HP9925NR>
X-Mail-Count: 15888

Darrell D. Mobley wrote:
> Greg, I can see the issue.  DFix never checks for the string "dovecot:
> pop3-login: Disconnected.*rip=".  Do I need to add that to DFix?  
>
> Also, before you made it a package installed through the GUI, I was able to
> add the list of AOL's mail servers to the GOODIP list manually.  How can I
> do that now without having to manually update the script every time you send
> out an update?  Is there an external configuration file the good IPs can go
> into?
>
>   
Hi Darrell.

What are AOL's mail servers doing to cause dfix to trip? If there is a 
false positive, I can investigate the cause of that problem.

I have deliberately kept it simple till now. The only official whitelist 
functionality is provided by valid authenticated dovecot logins. When 
this happens, that user is auto whitelisted. I was thinking of splitting 
a couple of bits out into a seperate config file - and you could 
possibly put some stuff in there...

Regards,
Greg.

--
+---------------------------------------------------------------------+
|   / \   Greg Kuhnert, gkuhnert (at mark) compassnetworks.com.au               |
| <  o  > Compass Networks - Pointing you in the right direction      |
|   \ /   Come see us for BlueQuartz / BlueOnyx modules & Support.    |
+---------------------------------------------------------------------+