From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1OQVQH-0007DF-M3 for garchives@archives.gentoo.org; Mon, 21 Jun 2010 01:03:37 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id C68CCE08B8 for ; Mon, 21 Jun 2010 01:03:35 +0000 (UTC) Received: from jumpgate.rods.id.au (ppp196-18.static.internode.on.net [59.167.196.18]) by pigeon.gentoo.org (Postfix) with ESMTP id 43F20E073E for ; Mon, 21 Jun 2010 00:13:44 +0000 (UTC) Received: from jumpgate.rods.id.au (localhost [127.0.0.1]) by jumpgate.rods.id.au (Postfix) with ESMTP id 9701B7A8E27 for ; Mon, 21 Jun 2010 10:13:42 +1000 (EST) Received: from [192.168.3.44] (shadow.rods.id.au [192.168.3.44]) by jumpgate.rods.id.au (Postfix) with ESMTP id 732612154A8 for ; Mon, 21 Jun 2010 10:13:42 +1000 (EST) Message-ID: <4C1EAEB3.2090502@Rods.id.au> Date: Mon, 21 Jun 2010 10:13:39 +1000 From: Rod User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.1.7) Gecko/20100111 Thunderbird/3.0.1 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] User & password scanning on pop3 References: <4C196BAB.7080308@Rods.id.au> In-Reply-To: <4C196BAB.7080308@Rods.id.au> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV using ClamSMTP X-Archives-Salt: 26af9cd2-8e33-49d5-86e9-5e2f1ef530d8 X-Archives-Hash: 8046b7d87fb217d27ea5d3b5b3c8c72e On 17/06/2010 10:26 AM, Rod wrote: > Hi, > > Does anyone know how to block, or auto programs in Gentoo to limit > or stop people scanning for a user/password hacking on your firewall? Hi, Just a update, I found the program I had running "Fail2Ban" was broken, so I have fixed that, but also closed off the pop3 server for non "SSL" traffic... pop3 - closed pop3-ssl - open certificates issued to both SSL users (pop/imap) imap-ssl open