Yeah, I just called Tech Support this morning and they verified in fact it
is broken. Which I figured it was prior to calling, checked the registry
after adding some IP's to block, nothing there, poked around in the root
Imail directory, saw a file called smtpd32.acc (Tech support confirmed this
is in theory the target file for Access Control listings) but no matter what
I did, and although the file access date changes, the file size never
changed from 28 bytes even when I added 20 IP's to block.
What happens is you think you got them all added, stop, restart the service
and everything is kosher. I caught it because I realized I had made a
mistake in the list I wanted to block, went back to edit it and poof -
nothing was there. So that is when I went digging deeper and finally called
support - who confirmed after talking to the developer it is in fact broken.
So unfortunately there is no way to block, at the mail server level, known
open relays or spammer sites via IP. I know I could do it in my Cisco but I
prefer to keep things segregated into function, and the Cisco should not
have to be doing the job of filtering spammer sites, the email system should
in fact handle that. My Cisco gets enough of a workout handling routing,
protocol filtering, anti-spoofing, etc.
Randy E. Reinhardt
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
System Administrator
Microsoft: "Where do you want to go today?"
Linux: "Where do you want to go tomorrow?"
FreeBSD: "Are you guys coming, or what?"
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Daniel Donnelly
Sent: Monday, July 10, 2000 1:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Daily Dictionary Attacks
Randy,
Guess I missed that one! I'm sure it did work in earlier versions (V5 and
its .0X variations), but could not tell you when it got 'broke' in 6.0X.
Maybe Gerry has a V5.0x and can try it.
Daniel Donnelly
Ipswitch Technical Support
________________________________________________________
See our Knowledge Base at http://support.ipswitch.com/kb
----- Original Message -----
From: "Randy E. Reinhardt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, July 10, 2000 3:53 PM
Subject: RE: [IMail Forum] Daily Dictionary Attacks
> Daniel, there is one problem with your solution. The Control Access
> function is broken in at least 6.03, not sure of the other versions.
>
>
> Randy E. Reinhardt
> [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
> Systems Administrator
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Daniel Donnelly
> Sent: Monday, July 10, 2000 7:03 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [IMail Forum] Daily Dictionary Attacks
>
>
> Gerry,
>
> If the IP changes and is within a 'block' of addresses, You could use the
> SMTP Security, Control Access button and enter a 'group' with the IP and
> subnetmask that will block a whole range of IPs. (Addresses in this list
> will not be allowed to connect to the SMTP service). Read settings
> _carefully_, as incorrect setting will block everyone else! Leave the
radio
> button for 'Granted Access' as is (checked). This might cause the ISP
> issuing the IPs to be unable to connect to your server, but that might
force
> them to contact you and you can then tell them of your troubles. Maybe
they
> can then trace the offender and restrict his access. Maybe they just do
not
> care.
>
> Daniel Donnelly
> Ipswitch Technical Support
> ________________________________________________________
> See our Knowledge Base at http://support.ipswitch.com/kb
>
> ----- Original Message -----
> From: "Gerry Dalton" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Monday, July 10, 2000 9:31 AM
> Subject: [IMail Forum] Daily Dictionary Attacks
>
>
> > This is the 10th consecutive day I have had a dictionary attack on my
mail
> > server. So far so good as far as defending spam, but now it's starting
to
> > really bug me having to waste the resources to say no to each Recpt to
in
> > each mail they are sending. What can I do now ?
> >
> > Is there any way to get this bastards. They keep changing addresses,
but
> > the lists contents seem to rotate every day or so. It appears to happen
> > each day between 22:00 and 01:00.
> >
> > Any ideas ?
> >
> > Gerry
> >
> >
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
