Hi Matt, > Is anyone getting dictionary attacked for long periods of time on a > domain with a nobody alias or something that is gatewayed? > > Thanks, Yes. I get hammered everyday..; I got rid of the nobody alias, filter the log files for the ip's that connected - and add them to my Imail Access control list. Currently that list contains nearly 10,000 ip's...
-Nick Hayer > > Matt > > > > Fritz Squib wrote: > > >Hey guys, this sounds like same problem that I have been > >experiencing, however it has been a bunch of spam with c.c. 's to > >non-existant mail addresses on my server (dictionary attack style) > >..My DNS is working fine. > > > >I spent the weekend returning mail from the old spool to a new spool > >that I had to create. > > > >I had around 67,000 of these buggers to deal with...no fun. > > > >All of the mail seems to be originating from dsl and cable modems > >with forged return addresses. > > > >My server is swamped again today - started again about 2-3 hours ago. > > > >Fritz > > > >Frederick P. Squib, Jr. > >Network Operations/Mail Administrator > >Citizens Telephone Company of Kecksburg > >http://www.wpa.net > > > >() ascii ribbon campaign - against html mail > >/\ - against microsoft attachments > > > > > > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.