[Declude.JunkMail] Tips for handling dictionary attacks

2004-05-18 Thread Keith Purtell
I'm having a new experience with our mail server. Suddenly I'm getting numerous dictionary attacks from different IP addresses. At first I blocked the IP addresses in IMail SMTP Security, but after adding a dozen I got tired. I'd rather detect the pattern and automatically stop it that way. Any

Re: [Declude.JunkMail] Tips for handling dictionary attacks

2004-05-18 Thread Matt
Keith, I've been seeing a sharp uptick in this sort of activity as well. Typically they include about 200 generic E-mail addresses, but some are now throwing thousands of addresses for a fuller attack. If the E-mail is going to a locally hosted domain, the best defense is to remove the

Re: [Declude.JunkMail] Tips for handling dictionary attacks

2004-05-18 Thread Matt
One other thing. Unless you have a ton of traffic (~100,000/day) or have people doing BCC blasts from your server to hundreds of addresses, there is a setting in IMail 8.x that can slow down the dictionary attack so that it doesn't threaten your server's ability to process E-mail. On the SMTP

Re: [Declude.JunkMail] Tips for handling dictionary attacks

2004-05-18 Thread Nick Hayer
On 18 May 2004 at 12:45, Matt wrote: Very slick Matt great idea! -Nick Hayer One other thing. Unless you have a ton of traffic (~100,000/day) or have people doing BCC blasts from your server to hundreds of addresses, there is a setting in IMail 8.x that can slow down the dictionary