Sandy, I asked about that exact issue. He said that it would be pointless to run Black Ice on the backup spoolers because they will accept all addresses of a dictionary attack. No errors are reported. The errors come in when the backup spooler forwards the messages to the primary server and those transactions must be whitelisted.
He seemed to be pretty knowledgeable and knew of Imail. I'm not the expert on this subject and it's possible I didn't properly report what he meant. I do know that his bottom line was that Black Ice wouldn't do what I wanted, but he did try and sell me on the firewall and intrusion detection features. We run pretty good firewalls and lock down the servers pretty well so I see no reason for a software firewall. -Joe ----- Original Message ----- From: "Sanford Whiteman" <[EMAIL PROTECTED]> To: "Joe Wolf" <[EMAIL PROTECTED]> Sent: Friday, February 06, 2004 6:07 PM Subject: Re[2]: [Declude.JunkMail] How do they do it? > > He also had major concerns about backup mail spoolers. He said that > > you have to whitelist your backup spoolers and that will still allow > > the spammer to run their dictionary attacks. > > Only if the backups don't run BlackIce. :) > > But if _they're_ downselling it, that's interesting. > > --Sandy > > > ------------------------------------ > Sanford Whiteman, Chief Technologist > Broadleaf Systems, a division of > Cypress Integrated Systems, Inc. > e-mail: [EMAIL PROTECTED] > > SpamAssassin plugs into Declude! > http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
