Date:  Sat, 15 Aug 2009 11:12:01 -0400
From:  "Darrell D. Mobley" <dmobley (at mark) uhostme.com>
Subject:  [coba-e:15893] Re: Block Hacker IP from BQ and BX Server
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <4C069C44094E4E7EAB2F77EFB6B7BCC0@HP9925NR>
In-Reply-To:  <4A863F80.6070705 (at mark) theanchoragesylvania.com>
References:  <2DAB4EF3-1B30-4A80-9B28-05C1CAC2B271 (at mark) housleyconsulting.com.au> <BAY107-W428D49C8AE2A6E64E87003D1070 (at mark) phx.gbl> <C81E2DF7ABD74911BB472BEC43ABD0A2 (at mark) HP9925NR> <4A8333EF.1040905 (at mark) theanchoragesylvania.com> <4AC0EE4443374853B240370C4E373A02 (at mark) HP9925NR> <5D1AFDCEFF6842F0A19B3AC3A086C636 (at mark) HP9925NR> <4A85F498.2060009 (at mark) theanchoragesylvania.com> <1EA69CB81B99462F8140C48C598F399E (at mark) HP9925NR> <4A863F80.6070705 (at mark) theanchoragesylvania.com>
X-Mail-Count: 15893

> -----Original Message-----
> From: Greg Kuhnert [mailto:greg.kuhnert (at mark) theanchoragesylvania.com]
> Sent: Saturday, August 15, 2009 12:54 AM
> To: coba-e (at mark) bluequartz.org
> Subject: [coba-e:15892] Re: Block Hacker IP from BQ and BX Server
> 
> Darrell D. Mobley wrote:
> >> If we look at that line, it is saying that this user disconnected. If
> >> their username was provided, can we assume that they were valid logins?
> >> Previously, dovecot told us that there was an auth failure if a
> username
> >> is provided on a failed login attempt?
> >>
> >> I do not see this happening on my test box.
> >>
> >> What dovecot version are you running?
> >>
> >
> > [root@www ~]# rpm -q dovecot
> > warning: only V3 signatures can be verified, skipping V4 signature
> > dovecot-1.0.13-0_68.el4
> >
> > This is apparently the latest dovecot available for BQ...
> >
> Are you sure? From my yum log file...
> 
> Jan 09 06:03:57 Updated: dovecot.i386 1.1.8-0BQ3

I am pretty sure:

[root@www ~]# yum clean all
Cleaning up Everything
37 headers removed
37 packages removed
15 metadata files removed
0 cache files removed
5 cache files removed
[root@www ~]# yum update dovecot
Setting up Update Process
Setting up repositories
update                    100% |=========================|  951 B    00:00

BlueQuartz                100% |=========================|  951 B    00:00

base                      100% |=========================| 1.1 kB    00:00

addons                    100% |=========================|  951 B    00:00

extras                    100% |=========================| 1.1 kB    00:00

Reading repository metadata in from local files
primary.xml.gz            100% |=========================| 160 kB    00:00

update    : ################################################## 516/516
primary.xml.gz            100% |=========================| 145 kB    00:01

BlueQuartz: ################################################## 766/766
primary.xml.gz            100% |=========================| 608 kB    00:00

base      : ################################################## 1591/1591
primary.xml.gz            100% |=========================|  190 B    00:00

primary.xml.gz            100% |=========================|  38 kB    00:00

extras    : ################################################## 172/172
Excluding Packages from CentOS-4 - Updates
Finished
Excluding Packages from CentOS-4 - Base
Finished
Excluding Packages from CentOS-4 - Addons
Finished
Excluding Packages from CentOS-4 - Extras
Finished
Could not find update match for dovecot
No Packages marked for Update/Obsoletion