<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<font face="Times New Roman, Times, serif">Hello all , <br>
<br>
I am having mailserver with centos 6.3 + cyrus-imad + postfix +
ldap <br>
We are using cyrus-sasl-2.1.23-13.el6.x86_64 with 'PAM' Mechanism
. <br>
<br>
Many spammer are trying to hack password for doing many
authentication with pop3 + imap + smtp services. <br>
on server Fail2ban hass been added , but its blocking hacker IPs
after certain interval and not in real time. Which is the actual
issue. <br>
<br>
I am looking for some real-time blocking where that particular
spammer IP + email id must get block .<br>
<br>
I believe this issue is very common with other too , is there any
option in 'saslauthd' / postfix / cyrus-imapd for below
requirement ? <br>
<br>
1) If server receive the wrong password , then is it possible to
introduce the delay of say 5-10 seconds to sender client ? So that
spammer will do less attempt ?<br>
2) After given wrong password attempt more than 3 time , the
particular "IP + email id" must get block for next 5-10 min. <br>
And then need to unblock after that. <br>
3) I check PAM-ABL , but its not working for </font><font
face="Times New Roman, Times, serif"><font face="Times New Roman,
Times, serif">'saslauthd'' with pop / imap / smtp . Because I
came to know that </font></font><font face="Times New Roman,
Times, serif"><font face="Times New Roman, Times, serif"><font
face="Times New Roman, Times, serif"> </font><font
face="Times New Roman, Times, serif"><font face="Times New
Roman, Times, serif">'saslauthd'' </font></font></font>is
not getting IP of source . <br>
How to pass source IP to </font><font face="Times New Roman,
Times, serif"><font face="Times New Roman, Times, serif"><font
face="Times New Roman, Times, serif"><font face="Times New
Roman, Times, serif"><font face="Times New Roman, Times,
serif">"saslauthd''</font></font></font></font> along
with email id , password and relam . Is there any patch available
for this ? <br>
<br>
Please suggest <br>
<br>
Regards<br>
Jayesh Shinde<br>
</font>
</body>
</html>