> What others have tried is some firewall products

BlackIce from ISS stopped the dictionary attacks for us.  Our email
volume is small enough that running a software firewall wouldn't bog the
server.


> I was analizing our Imail logs to track down a separate problem, and I
ran
> across the log snippet below. Based on previous threads on this issue,
it
> appears as though this person is running through common email names to
> verify users on the mail server. There are literally hundreds of
examples
> per day in our logs

We had the same problem hundreds of attacks each day from from every
country you could name. As quick as I could add them to the control list
it would come from a different ip in a different country. BlackIce
blocks them and reports them as SMTP attacks.  Don't even see them in
the logs.  

Good luck!


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to