Chris Hilts wrote the following on 11/21/2007 2:01 PM -0800: > casfre@xxxxxxxxx wrote: > > > I already have fail2ban running to protect a ssh server. Until > > now ( just 1 day ), it is running ok. > > > I will use your rules to protect squirrelmail too. :-) I already > > use squirrel_logger. :-) > > I would recommend using fail2ban to protect the underlying SMTP and IMAP > services rather than SquirrelMail, as it is just a client for those > services. You want to protect the services themselves. YMMV, of course. I would agree whole heartedly. In fact, I not only monitor SquirrelMail with fail2ban, but also SSH, SMTP (failed Auth & repeated failed relay attempt), IMAP, POP, and HTTP, as well. It works great in every instance. Bill ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users