From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1MXIyb-00058L-0H for garchives@archives.gentoo.org; Sat, 01 Aug 2009 18:06:37 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 66439E05F5; Sat, 1 Aug 2009 18:06:35 +0000 (UTC) Received: from mail.pcsrvc.com (saturn.pcsrvc.com [24.225.5.126]) by pigeon.gentoo.org (Postfix) with ESMTP id 54867E05F5 for ; Sat, 1 Aug 2009 18:06:35 +0000 (UTC) Received: from localhost (mail.pcsrvc.com [10.0.0.5]) by mail.pcsrvc.com (Postfix) with ESMTP id DDFB01EEC3BC for ; Sat, 1 Aug 2009 13:06:34 -0500 (CDT) X-Virus-Scanned: amavisd-new at pcsrvc.com Received: from mail.pcsrvc.com ([10.0.0.5]) by localhost (mail.pcsrvc.com [10.0.0.5]) (amavisd-new, port 10024) with LMTP id WNM3TJn5-hMl for ; Sat, 1 Aug 2009 13:06:32 -0500 (CDT) Received: from [192.168.3.5] (linux.homershut.net [24.225.5.125]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mail.pcsrvc.com (Postfix) with ESMTP id 4BA911EEC379 for ; Sat, 1 Aug 2009 13:06:32 -0500 (CDT) Subject: Re: [gentoo-server] iptables && fail2ban From: Homer Parker To: gentoo-server@lists.gentoo.org In-Reply-To: <4A757751.5000000@gmail.com> References: <10114659.21222086363221.JavaMail.gibbonsr@twix.insanity5902.no-ip.org> <4A7559A4.4090400@gmail.com> <279fbba40908010253p11603234x627e90407f0eacf9@mail.gmail.com> <4A757751.5000000@gmail.com> Content-Type: text/plain Date: Sat, 01 Aug 2009 13:06:31 -0500 Message-Id: <1249149991.4396.2.camel@laptop.homershut.net> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-server@lists.gentoo.org Reply-to: gentoo-server@lists.gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.24.5 Content-Transfer-Encoding: 7bit X-Archives-Salt: 4fb7d398-7b48-40e1-93e9-d00c7354eb5c X-Archives-Hash: 6f4b0e59649a99f9bbf5ad124381f5d7 On Sun, 2009-08-02 at 13:24 +0200, mrfroasty wrote: > Actually we are talking about proftp deamon analysed using > /var/log/auth.log. You can play with fail2ban-regex and see what it thinks. -- Homer Parker