Joel, unfortunately these are "dictionary attacks" and Imail has nothing in it to
prevent them ... it would be nice if Imail saw connections from the same IP that had
multiple user delivery failures, you could lock out the IP for x number of hours.
David
---------- Original Message ----------------------------------
From: "jpol" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Sat, 7 Aug 2004 13:26:12 -0500
>I am using Imail 8.12 for about 50 casual users. I have relay set to None. My log
>every day is about 100 Meg.
>
>
>
>I get a VAST number of what appears to be requests for fake email address.
>
>
>
>The typical log says:
>
>
>
>0040807 121936 127.0.0.1 SMTPD (0f28000f026e46a8) [192.168.1.30] connect
>216.196.194.98 port 1362
>
>20040807 121936 127.0.0.1 SMTPD (0f28000f026e46a8) [216.196.194.98] HELO
>amdsb03.org
>
>20040807 121936 127.0.0.1 SMTPD (0f28000f026e46a8) [216.196.194.98] MAIL
>FROM:<[EMAIL PROTECTED]>
>
>20040807 121936 127.0.0.1 SMTPD (0f28000f026e46a8) [216.196.194.98] RCPT
>TO:<[EMAIL PROTECTED]>
>
>20040807 121936 127.0.0.1 SMTPD (0f28000f026e46a8) [216.196.194.98] ERR
>Pearland.com invalid user <[EMAIL PROTECTED]
>
>
>
>How can I stop this?
>
>
>
>It is coming from MANY THOUSANDS of different IP numbers.
>
>
>
>
>
>By the way, this is my first time to post to this forum and if I am doing it wrong,
>please excuse me.
>
>
>
>Joel Hokanson
>
>[EMAIL PROTECTED]
>
>
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
