From: Alessandro C. <aca...@x-...> - 2014-02-25 09:28:24
|
MaxAuthErrors is set to 10 My MTA is Mailenable v. 8.01 So, how can I block these connections? It would be excellent if I could set which error codes to catch in ASSP config. I saw in a recent post that there is a conf parameter called AUTHLogPWD but it's not present in my assp.cfg Alessandro El 25/02/2014 01:22 a.m., Thomas Eckardt escribió: > To watch and act on the AUTH errors, use 'MaxAUTHErrors'. > > Your MTA uses an incorrect (rfc4954) reply on the authentication failure. > The '504' is > > 504 > Command parameter not implemented > > your MTA should answer with '535' or '534' > > 535 SMTP Authentication unsuccessful/Bad username or password > 534 Authentication mechanism is too weak > > Thomas > > > > > > > Von: Alessandro Cattani <aca...@x-...> > An: ASSP development mailing list <ass...@li...>, > Datum: 25.02.2014 04:53 > Betreff: [Assp-test] MaxErrors question > > > > Hi, > > ASSP 2.3.3 (13160) > > I have the MaxErrors value set to 3 but I see connections with several > errors that are not dropped. > See part of maillog below (xxx.xxx.xxx.xxx is my server IP): > > Thnsk you, > Alessandro > > ------- assp config ------ > Maximum Errors Per Session /(MaxErrors)/ <javascript:void(0);> > > The maximum number of SMTP session errors encountered before the > connection is dropped. An value of zero disables this feature. PB: > meValencePB <http://localhost:55555/#meValencePB> > > ------ maillog ------ > Feb-24-14 09:42:28 [Worker_1] Connected: session:26357C54 > 95.70.241.192:1492 > xxx.xxx.xxx.xxx:25 > xxx.xxx.xxx.xxx:26 > Feb-24-14 09:42:29 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:29 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:29 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:30 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:30 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:30 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:30 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:32 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:32 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:32 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:33 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:33 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:33 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:34 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:34 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:34 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:35 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:35 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:35 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:37 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:37 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:37 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:37 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:37 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:38 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:38 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:38 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:38 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:39 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:39 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:39 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:39 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:39 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:40 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:41 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:41 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:41 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:41 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:41 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:42 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:42 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:42 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:43 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:43 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:43 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:44 [Worker_1] 95.70.241.192 info: authentication - login > is used > Feb-24-14 09:42:44 [Worker_1] 95.70.241.192 warning: SMTP authentication > failed on xxx.xxx.xxx.xxx > Feb-24-14 09:42:44 [Worker_1] 95.70.241.192 [SMTP Error] 504 Invalid > Username or Password > Feb-24-14 09:42:45 [Worker_1] 95.70.241.192 info: authentication - login > is used > > ------------------------------------------------------------------------------ > Flow-based real-time traffic analytics software. Cisco certified tool. > Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer > Customize your own dashboards, set traffic alerts and generate reports. > Network behavioral analysis & security monitoring. All-in-one tool. > http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk > > _______________________________________________ > Assp-test mailing list > Ass...@li... > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > > > > ------------------------------------------------------------------------------ > Flow-based real-time traffic analytics software. Cisco certified tool. > Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer > Customize your own dashboards, set traffic alerts and generate reports. > Network behavioral analysis & security monitoring. All-in-one tool. > http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk > > > _______________________________________________ > Assp-test mailing list > Ass...@li... > https://lists.sourceforge.net/lists/listinfo/assp-test |