Re: Massiv dictionary attacks from <rackspace.com>

Hello Atıf CEYLAN,

Am 2012-08-14 14:51:17, hacktest Du folgendes herunter:
> you can use fail2ban program or block the ip by iptables manually.
> I'm suggestion fail2ban. it's a login attempt counter. 

And what do you suggest to with customers which use my  storage  servers
as there mailstore and fetch all uses by fetchmail?

Now I am puzzeling arround, because fail2ban block even normal Logins if
they happen to fast...

Exactly:  An enterprise use the M$ Exchange server internaly, but use my
server as thre mailserver and it has 20-50 users to fetch (fetchmail).

The Exchange server does this all 10 minutes  sequentialy  but  is  very
fast as my internet connectivity (1 GE) and check without  any  problems
20 accounts in less then 15 seconds.  BANNED!  :-S  Not very funny!

Thanks, Greetings and nice Day/Evening
    Michelle Konzack

-- 
##################### Debian GNU/Linux Consultant ######################
   Development of Intranet and Embedded Systems with Debian GNU/Linux
               Internet Service Provider, Cloud Computing
                <http://www.itsystems.tamay-dogan.net/>
                  <http://www.debian.tamay-dogan.net/>

itsystems@tdnet                     Jabber  [email protected]
Owner Michelle Konzack

Gewerbe Strasse 3                   Tel office: +49-176-86004575
77694 Kehl                          Tel mobil:  +49-177-9351947
Germany                             Tel mobil:  +33-6-61925193  (France)

USt-ID:  DE 278 049 239

Linux-User #280138 with the Linux Counter, http://counter.li.org/