IspConfig/SquirrelMail/failban/ubuntu

Discussion in 'Installation/Configuration' started by 360bladez, Apr 22, 2014.

  1. 360bladez

    360bladez New Member

    So I am new to server hosting and recently bought a vps for my buddies forums. And a few friends websites. No intentions of running a business or anything Just personal use.

    Everything is installed and working good
    Had brute force attempts on port 22 ssh/ changed port seem to stop them

    Running into another issues I cant seem to find the answer too
    My mail log is showing
    Code:
    Apr 22 07:47:33 vps postfix/smtpd[19129]: warning: 62-2-213-189.static.cablecom.ch[62.2.213.189]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Apr 22 07:47:34 vps postfix/smtpd[19134]: warning: 62-2-213-189.static.cablecom.ch[62.2.213.189]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Apr 22 07:47:34 vps postfix/smtpd[19131]: warning: 62-2-213-189.static.cablecom.ch[62.2.213.189]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Apr 22 07:47:34 vps postfix/smtpd[19132]: warning: 62-2-213-189.static.cablecom.ch[62.2.213.189]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Now after doing research online I read you can install squirrelmail logging then set up something with failban
    Does anyone have a guide I can use for my current setup?
    Or does anyone have any recommendations?
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    This are sasl login attempts from a external IP. Thats not related to squirrelmail. If these were squirrelmail logins, then the IP wol always be 127.0.0.1.
     
  3. 360bladez

    360bladez New Member

    Last edited: Apr 22, 2014
  4. srijan

    srijan New Member HowtoForge Supporter

  5. till

    till Super Moderator Staff Member ISPConfig Developer

    Which Ubuntu version do yu use? Did you use the perfect server guide to install your system, as the perfect server contains rules to stop these attacks with fail2ban.
     
  6. 360bladez

    360bladez New Member

Share This Page