Reply to: Smart Business Lists
Re: [IMail Forum] dictionary attacks on Friday 4:58:03 PM
I mentioned this here previously. The Server version has an error
called 'SMTP too many errors'. Our experience shows this is
almost always a dictionary attack and you can either right click
on the displayed connection and shut off the connection from
anywhere from a day to forever.. We even block known spammers
this way too. Even the kill.lst is not needed at that point.
'SMTP too many errors' happens when it tries to send to many
accounts that simply do not exist on the server... See details
at:
http://www.iss.net/products_services/hsoffice_protection/blkice_protect_server.php
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
----- Copy of Original Message(s): -----
S> Roger,
S> Friday, August 16, 2002 you wrote:
RH>> This solution seems terribly complex. We just installed Black Ice
RH>> Firewall for Servers and it detects many errors on SMTP and shuts
RH>> these connections off automatically. Nothing to it really. It
RH>> also stops all sorts of other server attacks automatically saving
RH>> processor too. For a couple a hundred bucks, it's one of the best
RH>> investments we've made.
S> That's interesting information. The black ice I've used had no
S> capability of stopping a dictionary attack.
S> How does it interface to IMAIL? The one I had either blocked
S> traffic or passed traffic.
S> Is there a setting to define the number of "invalid users" from
S> a particular IP to trigger blocking that IP?
S> Or how do you set it to block a dictionary attack and have you
S> actually watched an attack blocked?
S> Terry
S> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
S> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
S> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
S> --
S> ActivatorMail(tm) ver.061902 Scanned for all viruses by
S> www.activatormail.com intelligent anti-virus anti-spam service
--
ActivatorMail(tm) ver.061902 Scanned for all viruses by
www.activatormail.com intelligent anti-virus anti-spam service
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
