The harvesting attempt is increasing every day. In 1 hour period , i can see minimum 20 different ip address trying to harvest user database. Many connection is made from the same user via proxy but it is really annoying for mail servers to deal with many ip address and to waste processor time and memory for this.
We have finished the Dynamic Ip blocking system on the firewall , i am sending imail logs to sql server via kiwi syslog server , and a little program is accessing the firewall to block port 25 for the harvester ip address for 1 hour. My mail server is serving around 15000 user. I would like to know if anybody else had the harvesting problem ?? Or try any other method to prevent this. Here is the log : SMTPD (014200EE) [218.64.154.82] ERR atlas.net.tr invalid user <[EMAIL PROTECTED] SMTPD (014200EE) [218.64.154.82] ERR atlas.net.tr invalid user <[EMAIL PROTECTED] SMTPD (014200EE) [218.64.154.82] ERR atlas.net.tr invalid user <[EMAIL PROTECTED] SMTPD (014200EE) [218.64.154.82] ERR atlas.net.tr invalid user <[EMAIL PROTECTED] SMTPD (014200EE) [218.64.154.82] ERR atlas.net.tr invalid user <[EMAIL PROTECTED] SMTPD (014200EE) [218.64.154.82] ERR atlas.net.tr invalid user <[EMAIL PROTECTED] SMTPD (014200EE) [218.64.154.82] ERR atlas.net.tr invalid user <[EMAIL PROTECTED] SMTPD (014200EE) [218.64.154.82] ERR atlas.net.tr invalid user <[EMAIL PROTECTED] SMTPD (014200EE) [218.64.154.82] ERR atlas.net.tr invalid user <[EMAIL PROTECTED] SMTPD (014200EE) [218.64.154.82] ERR atlas.net.tr invalid user <[EMAIL PROTECTED] SMTPD (014200EE) [218.64.154.82] ERR atlas.net.tr invalid user <[EMAIL PROTECTED] Regards Rifat Levis --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
