On Mon, 27 Dec 2004, Shiloh Jennings wrote:

> Dictionary attack detection is something I really wish XMail could =
> natively
> do.  ModusMail was a package we used prior to XMail.  It could detect =
> and
> temporarily ban an IP address for a set period of time.  It actually =
> helped
> a lot.  You do not want to permanently ban such IP addresses, because =
> some
> dictionary attacks do get relayed through legit hosts/ISPs from hijacked
> email accounts from time to time.  Permanently banning the IP addresses =
> will
> eventually cause your email server to block a lot of legit email.  The
> feature in ModusMail let you set a duration for the block in additional =
> to a
> threshold for activating such a block.  There were a lot of things about
> ModusMail I did not like, but that dictionary attack detection stuff was
> actually really cool.

A new "SMTP-MaxErrors" inside the server.tab file. I let you immagine what 
it does ;)



- Davide

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to