>For the past 3 days, these JERKS have been killing us with a giant
>dictionary attack,
>
>I cannot stop it via IP address because they are using so many ip
>addresses.
>
>Our log files are at least 10 times as normal
>
>
>Will imailgate stop this?
I think what we have here is a confusion of deceptively similar terms. :))
"IMGate" is a relay-only (no local mailboxes on the box) SMTP-only mail hub.
These dictionary attacks are very often done with "SMTP command
pipelining", which IMGate can detect and reject as unauthorized, and your
Imail box won�t be touched. You can also put a copy of your Imail "known
users" list on IMGate and it will reject all mail not for known users.
Plus global RegEx string filtering on headers, bodies, and attachments, so
IMGAte could filter on some phrase like "$200 a month" or "Americans are
"cocooning" "
plus .... etc, etc, etc
btw, was there something useful in your 600-line message?
Len
http://MenAndMice.com/DNS-training
http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
