postdandee
a Postfix dictionary attack shield

postdandee is a Postfix log analyzer for dictionary attack prevention. it is a secure, fast and lightweight daemon that you can use and modify under the GPL

2007-12-12 - In 13 days, have a Merry Xmas! It seems we get to move Postdandee every year... This year it finally got its own home under my own domain. I hope this is the final destination, it gets tiring moving servers after a while. So welcome to ZeFonseca.com and I hope to have more time for Postdandee this year. It seems more people are using Postdandee so if you've made changes to it and you'd like to contribute to everyone else, please drop me an email at zefonseca [a@t] gmail.com and let me know how we can improve this. This 0.0.3 version is still running on my servers, no changes though.

2006-12-25 - Merry Christmas! The Matarese.com site was down for an unknown period of time(months not years) and I've had limited time to maintain it during most of 2006, so I've moved the postdandee home over to Traveler.com.br.

how does it work?

postdandee routinely checks the latest entries on your Postfix mail exchange log to identify a possible dictionary attack. a zero-tolerance policy guarantees that spammers have a real hard time finding a valid recipient on your SMTP server.

where does it run ?

we deploy postdandee on a linux datacenter and it has proved to be stable and lightweight. the only requirements are a valid Perl v5 interpreter and a standard UNIX-like shell environment.

i use Exim/Sendmail, will postdandee work?

the answer is : it depends on your perl skills. it probably will work with any maillog by changing a single-line regular expression. why didn't i do it? because we only run Postfix and making it (Exim | Sendmail)-compatible would break a programmer's great virtue that i proudly possess : lazyness. plus it's proudly GPL'd so you can adapt it to your needs.

so where is it ?

here (latest is v.0.0.3)

what is postfix?

postfix is Wietse Venema's mailer that started life as an alternative to the widely-used Sendmail program.

Postfix attempts to be fast, easy to administer, and secure, while at the same time being sendmail compatible enough to not upset existing users. Thus, the outside has a sendmail-ish flavor, but the inside is completely different.

 

author: Jose M. A. Fonseca (zefonseca [a@t] gmail.com)