Tag Info

New answers tagged

2

Postfix doesn't evaluate the smtpd_client_restrictions until the RCPT TO (or ETRN) command is sent. http://www.postfix.org/SMTPD_ACCESS_README.html#timing Current Postfix versions postpone the evaluation of client, helo and sender restriction lists until the RCPT TO or ETRN command. This behavior is controlled by the smtpd_delay_reject parameter. ...


1

Based on the man page for iptables I'd be inclined to agree with your assessment as well. [!] -i, --in-interface name Name of an interface via which a packet was received (only for packets entering the INPUT, FORWARD and PREROUTING chains). When the "!" argument is used before the interface name, the sense is inverted. ...


2

Using SCAN_TIMEOUT I would assume that if psad detects scanning attacks from some nefarious IP address that it wholesale blocks it for the duration of time set in AUTO_BLOCK_TIMEOUT. If you just want to block scanning attacks then from the manual I would say you might want to use this timeout instead: SCAN_TIMEOUT 3600; excerpt ...



Top 50 recent answers are included