No kidding! I'll take a closer look then. 

Eddie Cornejo, Sys Admin
Tom Rowe & Associates
956-412-6600 Ext.10
Toll Free USA 888-866-7693
Toll Free Canada 877-866-7693
http://www.tomrowe.com 

 


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
Sent: Friday, June 04, 2004 5:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Any solution for this?

----- Original Message -----
From: "Eddie Cornejo" <[EMAIL PROTECTED]>

> Is it possible for IMGate to know about valid accounts on the Imail 
> Server in order stem the tide of dictionary attacks. I see that 
> vamsoft can do it via AD, but I'm using an external SQL database. Both 
> solutions sound compelling.

The latest version of Postfix supports verify feature where the sending mail
server is delayed a split second before the response to the "recpt to"
command given, while Postfix queries the IMail server to see if the e-mail
account exists or not.  If it does, Postfix accepts the message for delivery
and logs the e-mail address in the good table of a local btree database for
future referrence.  If the account does not exist, Postfix responds with a
550, and rejects the delivery and logs the e-mail address in the reject
table of the database.  New delivery attempts query the local database
before posting a query to IMail.

There are separate expiration rules to manage the storage and purging of
both good and bad e-mail address from the database.  Works quite well for us
and does not even add more than a second to the overall message processing
time.

Bill


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to