We had the same problem here a week or two ago. The attacks were coming from
UUNET dial-up lines. We blocked some of the IP addresses, but they just kept
switching lines.
Fortunately, these attacks didn't significantly slow down the IMail server, so
we just waited them out. They obviously moved on to other targets...
The UUNET security forces were quite uninterested in tracking or stopping the
abusers.
BTW, the only way I noticed that anything was amiss was the increased log file
size...
Kevin
------------------------------------------------------------------
Kevin E. Bennett Automation Associates, Inc.
Senior Simulation Analyst http://www.aaisim.com
[EMAIL PROTECTED]
+1 858 481 6050 x113 Voice Systems Design Analysis
+1 858 481 7427 FAX and Simulation Modeling
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Jack Taugher
> Subject: Re: [IMail Forum] server attack
>
>
> I see the problem. It's coming from FLORIDA -- they appear to have more
> problems than just counting, eh?
>
> > 11:29 03:48 SMTPD(07C30154) [63.17.249.128] RCPT To:<[EMAIL PROTECTED]>
> > 11:29 03:48 SMTPD(07C30154) [63.17.249.128] ERR florida.com invalid user
> > <[EMAIL PROTECTED]
> > 11:29 03:48 SMTPD(07C30154) [63.17.249.128] RCPT To:<[EMAIL PROTECTED]>
> > 11:29 03:48 SMTPD(07C30154) [63.17.249.128] ERR florida.com invalid user
> > <[EMAIL PROTECTED]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
