[SSHGuard-users] sshguard sniffing postifx---no odor detected

[<li...@la...>]

I set up a simple script using swaks to hit my email server with 100
messages to relay. Since I don't have an open relay, these actions get
flagged by postfix. Eventually the connection got dropped by postfix
anvil, the rate limiter. Best I can tell postfix locks me out for 600
seconds.
http://www.postfix.org/anvil.8.html

In any event, sshguard didn't block me. I grepped all the auth.logs for
the offending IP. (I would have done more email testing but the Peet's
wifi is on a dynamic blocking list!)



May 20 23:49:55 theranch postfix/smtpd[63244]: disconnect from unknown[216.216.202.69] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
May 20 23:49:56 theranch postfix/smtpd[63244]: connect from unknown[216.216.202.69]
May 20 23:49:56 theranch postfix/smtpd[63244]: NOQUEUE: reject: RCPT from unknown[216.216.202.69]: 554 5.7.1 <wr...@wr...>: Relay access denied; from=<me@cantsay> to=<wr...@wr...> proto=ESMTP helo=<linux-h57q.site>
May 20 23:49:56 theranch postfix/smtpd[63244]: disconnect from unknown[216.216.202.69] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
May 20 23:49:57 theranch postfix/smtpd[63244]: connect from unknown[216.216.202.69]
May 20 23:49:57 theranch postfix/smtpd[63244]: NOQUEUE: reject: RCPT from unknown[216.216.202.69]: 554 5.7.1 <wr...@wr...>: Relay access denied; from=<me@cantsay> to=<wr...@wr...> proto=ESMTP helo=<linux-h57q.site>
May 20 23:49:57 theranch postfix/smtpd[63244]: disconnect from unknown[216.216.202.69] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
May 20 23:49:57 theranch postfix/smtpd[63244]: connect from unknown[216.216.202.69]
May 20 23:49:57 theranch postfix/smtpd[63244]: NOQUEUE: reject: RCPT from unknown[216.216.202.69]: 554 5.7.1 <wr...@wr...>: Relay access denied; from=<me@cantsay> to=<wr...@wr...> proto=ESMTP helo=<linux-h57q.site>
May 20 23:49:57 theranch postfix/smtpd[63244]: disconnect from unknown[216.216.202.69] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
May 20 23:53:21 theranch postfix/anvil[63222]: statistics: max connection rate 71/60s for (smtp:216.216.202.69) at May 20 23:49:31
May 20 23:53:21 theranch postfix/anvil[63222]: statistics: max connection count 1 for (smtp:216.216.202.69) at May 20 23:43:33