<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
<br>
</div>
<blockquote type="cite">
<div>
On 22/04/2020 19:56 Benny Pedersen <
<a href="mailto:me@junc.eu">me@junc.eu</a>> wrote:
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
On 2020-04-22 18:45, Sami Ketola wrote:
</div>
<div>
<br>
</div>
<blockquote type="cite">
<div>
Actually by far the biggest source of stolen credentials is
</div>
<div>
viruses/trojans harvesting them.
</div>
</blockquote>
<div>
i tryed blacklist all ips that got passwords errors, but that ends in
</div>
<div>
big shorewall blrules so i turn it over to just add whitelist into
</div>
<div>
blrules where ips is known custommers that dont abuse server, that way
</div>
<div>
my shorewall got alot smaller config files to read and no kids from
</div>
<div>
outside can abuse logins that way, now i have maked php script that
</div>
<div>
monitors where abusers is from without give them access to abused ports
</div>
<div>
<br>
</div>
<div>
and i have seen the trojans or malware reveal strong passwords loose
</div>
<div>
aswell, the battle is only as strong as users using email programs
</div>
<div>
<br>
</div>
<div>
so for now i see no fails on logins anymore from the only whitelisted
</div>
<div>
asn range of trusted custommers ips
</div>
<div>
<br>
</div>
<div>
i just hope there would be free simple policy server for doevecot not
</div>
<div>
only for dovecot oy
</div>
<div>
<br>
</div>
<div>
we are in same boat all, dont let it sink
</div>
</blockquote>
<div>
<br>
</div>
<div>
You mean https://github.com/PowerDNS/weakforced ?
</div>
<div class="io-ox-signature">
<pre>---
Aki Tuomi</pre>
</div>
</body>
</html>