> So what should you do? If at all possible, lock down your mail
>server. Set it to "Relay for addresses",
Assume that the entire IP address space is being scanned for open mail
servers (I see about a dozen scans per week, about one in 10 is for SMTP
servers.
> We are also thinking of writing a program to detect a spam attack
>and automatically hold E-mail once more than X E-mails comes through from
>the same IP address within Y minutes.
If they think they are getting through, they will pump as many messages
into the system as the data line will permit. This reduces system
performance for the other users. I've seen the multi-connections slow
SMTP connection response for everyone (I use a tarpit setting of 150 mSec,
which may be part of the overall slowdown).
--
-----------------------------------------------------------
Mike Nice <[EMAIL PROTECTED]>
-----------------------------------------------------------
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
