+ Responder ao Tópico



  1. #1
    Pessoal,

    como evitar isso no sendmail? Esses probes de contas de e-mail são um inferno. Existem alguma configuração ou pacote que monitora essas tentativas e bloqueia o IP da origem???

    isso é só um pedaço do log. Imaginem que a palhaçada começou com
    aaaa@mailserver.net.br


    []´s
    Marcelo

    Jul 15 09:19:13 voyager sendmail[1074]: h6F5aWY01074:
    <gyvd@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1125]: h6F5abY01125:
    <gyvb@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1108]: h6F5aZY01108:
    <gyurkovits1@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1103]: h6F5aYY01103:
    <gyuw@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1198]: h6F5bJY01198:
    <gyuq@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1100]: h6F5aYY01100:
    <gyuz@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1102]: h6F5aYY01102:
    <gyva@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1242]: h6F5buY01242:
    <gyuf@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1198]: h6F5bJY01198:
    <gyx@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1242]: h6F5buY01242:
    <gyxd@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1074]: h6F5aWY01074:
    <gyww@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1107]: h6F5aZY01107:
    <gyuj@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1104]: h6F5aYY01104:
    <gyulliannah@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1221]: h6F5bbY01221:
    <gyv@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1107]: h6F5aZY01107:
    <gyxh@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1083]: h6F5aXY01083:
    <gyum@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1082]: h6F5aXY01082:
    <gyun@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1085]: h6F5aXY01085:
    <gyup@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1053]: h6F5aVY01053:
    <gyvm@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1123]: h6F5abY01123:
    <gyvpuu@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1121]: h6F5aaY01121:
    <gyuszi@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1157]: h6F5aoY01157:
    <gyue@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1083]: h6F5aXY01083:
    <gyxk@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1170]: h6F5b2Y01170:
    <gyut@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1236]: h6F5btY01236:
    <gyuu@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1123]: h6F5abY01123:
    <gyxq@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1157]: h6F5aoY01157:
    <gyxr@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1082]: h6F5aXY01082:
    <gyxn@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1123]: h6F5abY01123:
    <gyxv@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1236]: h6F5btY01236:
    <gyxt@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1170]: h6F5b2Y01170:
    <gyxs@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1121]: h6F5aaY01121:
    <gyxp@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1221]: h6F5bbY01221:
    <gyxj@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1074]: h6F5aWY01074:
    <gyxf@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1100]: h6F5aYY01100:
    <gyxb@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1103]: h6F5aYY01103:
    <gywz@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1125]: h6F5abY01125:
    <gywy@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1124]: h6F5aaY01124:
    <gywx@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1126]: h6F5abY01126:
    <gywv@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1080]: h6F5aXY01080:
    <gywu@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1115]: h6F5aZY01115:
    <gywt@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1158]: h6F5apY01158:
    <gyws@mailserver.net.br>... User unknown
    Jul 15 09:19:13 voyager sendmail[1061]: h6F5aVY01061:
    <gywq@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1058]: h6F5aVY01058:
    <gywp@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1243]: h6F5buY01243:
    <gywo@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1057]: h6F5aVY01057:
    <gywl@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1101]: h6F5aYY01101:
    <gywkk@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1240]: h6F5btY01240:
    <gywj@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1199]: h6F5bJY01199:
    <gywi@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1200]: h6F5bJY01200:
    <gywh@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1171]: h6F5b2Y01171:
    <gywg@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1197]: h6F5bJY01197:
    <gywf@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1055]: h6F5aVY01055:
    <gywc@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1059]: h6F5aVY01059:
    <gywb@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1171]: h6F5b2Y01171:
    <gyyq@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1199]: h6F5bJY01199:
    <gyyp@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1072]: h6F5aWY01072:
    <gywa@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1127]: h6F5aaY01127:
    <gyvz@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1239]: h6F5btY01239:
    <gyvy@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1065]: h6F5aWY01065:
    <gyvv@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1116]: h6F5aZY01116:
    <gyvt@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1112]: h6F5aZY01112:
    <gyvi@mailserver.net.br>... User unknown
    Jul 15 09:19:14 voyager sendmail[1070]: h6F5aWY01070:
    <gyvc@mailserver.net.br>... User unknown


  2. #2
    Pendosa
    Estou procurando alguma coisa sobre isso tb mas até agora nada.
    Seria alguma ferramenta ou configuração no sendmail que, ao identificar muitos "user unknow" com mesma origem durante um intervalo de tempo automaticamente já o bloqueasse via IPTABLES/IPCHAINS ou /etc/mail/access

    não há defesa contra isso????






Tópicos Similares

  1. Respostas: 14
    Último Post: 28-02-2016, 00:23
  2. Como evitar clone de MAC e IP
    Por river2 no fórum Redes
    Respostas: 3
    Último Post: 27-07-2008, 19:32
  3. Como evitar web proxy e alteração de proxys??
    Por Terry no fórum Servidores de Rede
    Respostas: 10
    Último Post: 23-06-2008, 12:35
  4. Como evitar clone de ip e mac ?
    Por alannery no fórum Segurança
    Respostas: 2
    Último Post: 24-10-2007, 02:51
  5. Evitar uso de ap na torre como gateway
    Por drcfilho no fórum Redes
    Respostas: 3
    Último Post: 14-01-2007, 18:05

Visite: BR-Linux ·  VivaOLinux ·  Dicas-L