From owner-freebsd-hackers@FreeBSD.ORG Mon Jan 20 22:55:23 2014 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id CF46F508 for ; Mon, 20 Jan 2014 22:55:23 +0000 (UTC) Received: from away.numachi.com (away.numachi.com [66.228.38.138]) by mx1.freebsd.org (Postfix) with SMTP id 7E4E6145B for ; Mon, 20 Jan 2014 22:55:23 +0000 (UTC) Received: (qmail 14911 invoked from network); 20 Jan 2014 22:48:39 -0000 Received: from unknown (HELO meisai.numachi.com) (71.181.44.212) by away.numachi.com with SMTP; 20 Jan 2014 22:48:39 -0000 Received: (qmail 94596 invoked by uid 1001); 20 Jan 2014 22:25:23 -0000 Date: Mon, 20 Jan 2014 17:25:23 -0500 From: Brian Reichert To: "William A. Fink" Subject: Re: Looking For Beginner/Mediocre Help Message-ID: <20140120222523.GG55121@numachi.com> References: <06be01cf162a$dd337bd0$979a7370$@billfink.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <06be01cf162a$dd337bd0$979a7370$@billfink.com> User-Agent: Mutt/1.5.9i Cc: freebsd-hackers@freebsd.org X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jan 2014 22:55:23 -0000 On Mon, Jan 20, 2014 at 04:59:11PM -0500, William A. Fink wrote: > I hope I'm not double-posting, posting in a list I'm not supposed to, but it > seems (to me, anyway) a great place to start. Seems it never fails, someone > comes back and complains, this is the wrong list. (No matter which list I've > posted to in the past.) if you're looking to expoose the incoming IP addresses, this post: http://serverfault.com/questions/281231/help-linux-server-under-smtp-saslauthd-attack has a response that says: You have to increase the LogLevel to 10 or more. Look in sendmail.mc or put something like define(confLOG_LEVEL',10')dnl This will log the IP number on auth failures. Presumably, once they're exposed, any of the mechanims for softly managing an IP blacklist would help. > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org" -- Brian Reichert BSD admin/developer at large