Re: [SSHGuard-users] Stow away

[Carmel <car...@ou...>]

On Fri, 03 Jun 2016 08:43:20 -0400
li...@la... wrote:

> I've yet to trigger sshguard with postfix, so I appreciate this post.
> It will help me make a pentest, such as it is. A real pentest would
> trigger everything known about sshguard detection and in theory
> unknown attacks. ‎I've thrown a lot of random text at postfix and
> because of the limited "vocabulary" of MTA, it all gets rejected by
> postfix. 

I use Postfix and on an average, sshguard is triggered twice a day and
sometimes more. I use sshguard in conjunction with IPFW so my setup may
be different from yours.

It would really help is you posted your "postfix -n" output plus a few
examples of log entries that you believe should be triggering a
response.

-- 
Carmel