>This is the 10th consecutive day I have had a dictionary attack on my mail
>server. So far so good as far as defending spam, but now it's starting to
>really bug me having to waste the resources to say no to each Recpt to in
>each mail they are sending. What can I do now ?
there's nothing you can do at Imail, and damn little you can do elsewhere,
against DoS attacks, such as this or any mailbomb. The sh@t just keeps
coming.
If you're lucky a given dictionary attack will be from on ip address, so
you could block that ip address or Class C at your border router. This
moves the reject work to your border router but keeps Imail SMTPD from
being tied up rejecting that cr@p. But if their ip address is changing,
you target is moving and much harder to block, even impossible.
>Is there any way to get this bastards. They keep changing addresses
the RCPT TO: address or the source ip address? Can you show us some
SMTPD log lines??
Len
Len
http://BIND8NT.MEIway.com: ISC BIND 8 installable binary for NT4
http://IMGate.MEIway.com: Build free, hi-perf, anti-spam mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
