Re: [SSHGuard-users] Stow away

[<li...@la...>]

I'm using IPFW as well. I haven't seen anything in my maillog that should be triggering sshguard. I just want to test it.

  Original Message  
From: Carmel
Sent: Friday, June 3, 2016 9:04 AM
To: ssh...@li...
Subject: Re: [SSHGuard-users] Stow away

On Fri, 03 Jun 2016 08:43:20 -0400
li...@la... wrote:

> I've yet to trigger sshguard with postfix, so I appreciate this post.
> It will help me make a pentest, such as it is. A real pentest would
> trigger everything known about sshguard detection and in theory
> unknown attacks. ‎I've thrown a lot of random text at postfix and
> because of the limited "vocabulary" of MTA, it all gets rejected by
> postfix. 

I use Postfix and on an average, sshguard is triggered twice a day and
sometimes more. I use sshguard in conjunction with IPFW so my setup may
be different from yours.

It would really help is you posted your "postfix -n" output plus a few
examples of log entries that you believe should be triggering a
response.

-- 
Carmel

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
sshguard-users mailing list
ssh...@li...
https://lists.sourceforge.net/lists/listinfo/sshguard-users