My linux sendmail server is being forced out of commission by a flood of invalid smtp saslauthd logins.
I have searched and searched for a way to determine the IP so I can block it ... no luck.
The IP is not being recorded in the messages or secure logs.
Any advice would be greatly appreciated.

link
feedback

merged by Chopper3 Jun 17 '11 at 8:51

this question was merged with Help! Linux server under SMTP SASLAUTHD attack! because it is an exact duplicate of that question.

Browse other questions tagged or ask your own question.