Block IP

General eFa discussion
Post Reply
horndrup
Posts: 6
Joined: 20 Jul 2017 07:36

Block IP

Post by horndrup » 06 Feb 2020 13:43

I see alot of these in the maillog from the same ip.

Code: Select all

Feb  6 14:22:31 mailin postfix/smtpd[55105]: warning: hostname ip-38-57.ZervDNS does not resolve to address 92.118.38.57: Name or service not known
Feb  6 14:22:31 mailin postfix/smtpd[55105]: connect from unknown[92.118.38.57]
Feb  6 14:22:37 mailin postfix/smtpd[55105]: disconnect from unknown[92.118.38.57] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4

Do I need to do anything about it and can I?

User avatar
shawniverson
Posts: 2994
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Block IP

Post by shawniverson » 06 Feb 2020 13:55

That's postfix doing its job. Someone with a bad MTA is trying to connect to you and postfix is resetting the connection.

The only time it would be an issue is if you were getting flooded with them (1000s per minutes) which would indicate a DOS attack.
Version eFa 4.0.2 now available!

Post Reply