| 00:25.06 | *** join/#uphpu ninnypants (~ninnypant@unaffiliated/ninnypants) |
| 00:25.07 | *** mode/#UPHPU [+v ninnypants] by ChanServ |
| 00:53.22 | *** join/#uphpu ninnypants (~ninnypant@unaffiliated/ninnypants) |
| 00:53.22 | *** mode/#UPHPU [+v ninnypants] by ChanServ |
| 00:57.08 | *** join/#uphpu ponderability (~ponderabi@2601:b:5a00:74e:657a:bdc5:5568:757b) |
| 01:12.31 | *** join/#uphpu _carbohydrate (~textual@192.150.9.201) |
| 01:21.49 | *** join/#uphpu ponderability (~ponderabi@2601:b:5a00:74e:b81a:b344:2443:cbc9) |
| 01:45.01 | *** join/#uphpu jnbek (~jnbek@pdpc/supporter/active/jnbek) |
| 01:45.01 | *** mode/#UPHPU [+v jnbek] by ChanServ |
| 01:51.19 | *** join/#uphpu kendsnyder (~Adium@65-130-240-104.slkc.qwest.net) |
| 01:51.19 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 01:52.49 | *** join/#uphpu ponderability (~ponderabi@2601:b:5a00:74e:b5d2:48b5:6b4d:4174) |
| 02:44.16 | *** join/#uphpu bikerdan (~Bikerdan@67.199.186.20) |
| 03:04.50 | *** join/#uphpu clintberry (~clintberr@38.73.150.199) |
| 03:04.50 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 03:17.17 | *** join/#uphpu kendsnyder (~Adium@65-130-240-104.slkc.qwest.net) |
| 03:17.17 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 06:20.20 | *** join/#uphpu kendsnyder (~Adium@65-130-240-104.slkc.qwest.net) |
| 06:20.20 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 06:41.36 | *** join/#uphpu kendsnyder (~Adium@65-130-240-104.slkc.qwest.net) |
| 06:41.36 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 13:14.59 | *** join/#uphpu eggyknap (~jtolley@74.36.72.176) |
| 13:14.59 | *** join/#uphpu eggyknap (~jtolley@unaffiliated/eggyknap) |
| 13:14.59 | *** mode/#UPHPU [+v eggyknap] by ChanServ |
| 13:59.03 | *** join/#uphpu bbankes (~bbankes@50-200-100-242-static.hfc.comcastbusiness.net) |
| 14:02.43 | *** join/#uphpu bikerdan (~Bikerdan@67.214.225.82) |
| 14:08.01 | *** join/#uphpu josephscott (~josephsco@192.0.125.251) |
| 14:25.30 | *** join/#uphpu Heartsbane (tsharpe@unaffiliated/heartsbane) |
| 14:25.30 | *** mode/#UPHPU [+v Heartsbane] by ChanServ |
| 14:39.28 | *** join/#uphpu clintberry (~clintberr@205.197.215.90) |
| 14:39.28 | *** mode/#UPHPU [+v clintberry] by ChanServ |
| 14:51.28 | *** join/#uphpu ninnypants (~ninnypant@unaffiliated/ninnypants) |
| 14:51.28 | *** mode/#UPHPU [+v ninnypants] by ChanServ |
| 15:14.55 | *** join/#uphpu kendsnyder (~Adium@68.69.174.66) |
| 15:14.55 | *** mode/#UPHPU [+v kendsnyder] by ChanServ |
| 15:27.39 | *** join/#uphpu SunSparc (~jonathan@c-174-52-180-7.hsd1.ut.comcast.net) |
| 15:27.39 | *** mode/#UPHPU [+v SunSparc] by ChanServ |
| 15:29.29 | *** join/#uphpu ponderability (~ponderabi@155.99.246.190) |
| 15:46.56 | *** join/#uphpu bikerdan (~Bikerdan@67.214.225.82) |
| 16:16.14 | mgeary | hey folks. look at this email header i just got: |
| 16:16.20 | mgeary | on a bunch of blowback spam |
| 16:16.35 | mgeary | Received: from RYwFL.gearyweb.com (RYwFL.gearyweb.com [160.149.124.198])by â¦. |
| 16:17.00 | mgeary | gearyweb.com is my domain, but i clearly donât have a DNS record of RYwFL. Why would that be there? |
| 16:17.46 | *** part/#uphpu bikerdan (~Bikerdan@67.214.225.82) |
| 17:04.39 | bbankes | mgeary: I'm pretty sure that can be spoofed easily without a public DNS record. However, I'm not as familiar with email headers as I am with fail2ban. I may have missed some of that conversation. Were you able to get it working? |
| 17:06.53 | mgeary | no, i didnât get fail2ban working yet. i found this: https://www.digitalocean.com/community/tutorials/how-to-protect-ssh-with-fail2ban-on-centos-6, but iâm not clear on how to get it protecting our SMTP system from brute force attempts |
| 17:09.34 | bbankes | Ah. I only have experience using it for SSH brute force attempts. |
| 17:13.55 | bbankes | For SMTP, we just whitelist allowed IPs. |
| 17:14.25 | mindjuju | mgeary i don't think this is an attack on your server |
| 17:14.33 | mgeary | mindjuju: no, itâs not. two different things |
| 17:14.33 | mindjuju | rather, it's an attack based on your lack of SPF |
| 17:15.18 | mindjuju | right, i'm not talking about fail2ban |
| 17:15.37 | mindjuju | no spf and so, nobody knows who is authorized to send for gearyweb.com/ |
| 17:16.00 | mindjuju | oh wait, my bad, that slash stopped kitterman from seeing it |
| 17:16.22 | mindjuju | gearyweb spf - v=spf1 ip4:107.188.169.107 mx ~all |
| 17:18.49 | fungus | mgeary, that IP belongs to the US Army Information Systems organization. Since it's not you, it's clearly just a spoofed name. |
| 17:19.41 | fungus | Fort Huachuca, AZ to be specific |
| 17:21.10 | bbankes | Was the talk yesterday about ZF2, Doctrine, and Apigility recorded? |
| 17:24.14 | mgeary | so, actually that was my old home IP, fungus |
| 17:24.27 | mgeary | i didnât change the SPF record when i switched to Google Fiber |
| 17:59.48 | *** join/#uphpu ponderability (~ponderabi@155.99.246.190) |
| 18:41.41 | *** mode/#UPHPU [+v utahcon] by ChanServ |
| 19:23.31 | *** join/#uphpu ponderability (~ponderabi@155.99.246.190) |
| 20:05.10 | *** join/#uphpu _carbohydrate (~textual@192.150.9.201) |
| 21:03.17 | *** join/#uphpu _carbohydrate (~textual@192.150.9.201) |
| 21:37.30 | *** join/#uphpu bbankes (~bbankes@67-2-141-169.slkc.qwest.net) |
| 22:23.03 | *** join/#uphpu clintber_ (~clintberr@205.197.215.90) |
| 23:30.45 | *** join/#uphpu trave (sid38181@gateway/web/irccloud.com/x-wusimvqymrlfbjby) |