Re: [SSHGuard-users] sshguard-1.7.0 and Postfix

[Jim S. <jse...@Li...>]

On Fri, 30 Sep 2016 10:13:44 +0000
Gerard Seibert <car...@ou...> wrote:

[snip]
> 
> While the IP address will change, the action is never blocked by
> sshguard. Shouldn't sshguard recognize this as an attack and block it?

I should certainly hope not.  If one took to blackholing every system on
the 'net that had wonky DNS, they'd have a significant portion blocked a
significant amount of the time.

It may be in conjunction with an attack, but, those log entries, in and
of themselves, do not suggest an attack.

If you do not wish to accept email from such sources (I would not, but
that's a personal/corporate/site preferance), you can use one of the
appropriate Postfix config directives.

Regards,
Jim
-- 
Note: My mail server employs *very* aggressive anti-spam
filtering.  If you reply to this email and your email is
rejected, please accept my apologies and let me know via my
web form at <http://jimsun.LinxNet.com/contact/scform.php>.