Ban IP's from saslauthd/postfix?

[Ben Coleman]

On 05/22/2015 04:35 AM, Petter Adsen wrote:
> My mailserver is currently being targeted by what seems like a botnet,
> probably looking to send spam. Is there something like fail2ban I can
> use that will lock an IP out after a few failed attempts to
> authenticate?

I haven't used it with email authentication, but actually, fail2ban
might do.  It has filters for more than looking for ssh authentication
failures.  E.g. look at the postfix-sasl, sendmail-auth, dovecot or such
filters.

Ben