DoFrequencyIP and/or maxSMTPipConnects and/or maxSMTPipDuration don't appear to be working. I have DoFrequencyIP set to block, maxSMTPipConnects set to 10 and maxSMTPipDuration set to 90, yet the following happened last night.
Apr-11-08 03:35:41 Connected: 62.149.229.241:47721 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:41 id-99341-01798 [RelayAttempt] 62.149.229.241 <[EMAIL PROTECTED]> relay attempt blocked for: [EMAIL PROTECTED] Apr-11-08 03:35:41 id-99341-01798 62.149.229.241 <[EMAIL PROTECTED]> PB-Message-Score is 15, added 15 (relay attempt blocked for: [EMAIL PROTECTED]) Apr-11-08 03:35:41 id-99341-01798 62.149.229.241 <[EMAIL PROTECTED]> PB-IP-Score for '62.149.229.0' is 15, added 15 for RelayAttempt Apr-11-08 03:35:41 Disconnected: 62.149.229.241 Apr-11-08 03:35:42 Connected: 62.149.229.241:47730 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:42 Disconnected: 62.149.229.241 Apr-11-08 03:35:42 Connected: 62.149.229.241:47740 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:43 Disconnected: 62.149.229.241 Apr-11-08 03:35:43 Connected: 62.149.229.241:47751 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:44 Disconnected: 62.149.229.241 Apr-11-08 03:35:44 Connected: 62.149.229.241:47760 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:45 Disconnected: 62.149.229.241 Apr-11-08 03:35:45 Connected: 62.149.229.241:47771 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:46 Disconnected: 62.149.229.241 Apr-11-08 03:35:46 Connected: 62.149.229.241:47780 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:46 Disconnected: 62.149.229.241 Apr-11-08 03:35:47 Connected: 62.149.229.241:47787 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:47 Disconnected: 62.149.229.241 Apr-11-08 03:35:47 Connected: 62.149.229.241:47795 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:48 Disconnected: 62.149.229.241 Apr-11-08 03:35:48 Connected: 62.149.229.241:47802 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:49 Disconnected: 62.149.229.241 Apr-11-08 03:35:49 Connected: 62.149.229.241:47809 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:50 Disconnected: 62.149.229.241 Apr-11-08 03:35:50 Connected: 62.149.229.241:47818 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:51 Disconnected: 62.149.229.241 Apr-11-08 03:35:51 Connected: 62.149.229.241:47830 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:51 Disconnected: 62.149.229.241 Apr-11-08 03:35:52 Connected: 62.149.229.241:47838 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:52 Disconnected: 62.149.229.241 Apr-11-08 03:35:52 Connected: 62.149.229.241:47848 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:53 Disconnected: 62.149.229.241 Apr-11-08 03:35:53 Connected: 62.149.229.241:47856 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:54 Disconnected: 62.149.229.241 Apr-11-08 03:35:54 Connected: 62.149.229.241:47860 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:55 Disconnected: 62.149.229.241 Apr-11-08 03:35:55 Connected: 62.149.229.241:47865 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:55 Disconnected: 62.149.229.241 Apr-11-08 03:35:56 Connected: 62.149.229.241:47868 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:56 Disconnected: 62.149.229.241 Apr-11-08 03:35:56 Connected: 62.149.229.241:47874 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:57 Disconnected: 62.149.229.241 Apr-11-08 03:35:57 Connected: 62.149.229.241:47880 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:58 Disconnected: 62.149.229.241 Apr-11-08 03:35:58 Connected: 62.149.229.241:47885 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:35:59 Disconnected: 62.149.229.241 Apr-11-08 03:35:59 Connected: 62.149.229.241:47893 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:36:00 Disconnected: 62.149.229.241 Apr-11-08 03:36:00 Connected: 62.149.229.241:47898 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:36:00 Disconnected: 62.149.229.241 Apr-11-08 03:36:00 Connected: 62.149.229.241:47907 -> 192.168.1.91:25 -> 192.168.1.91:125 Apr-11-08 03:36:01 Disconnected: 62.149.229.241 That was someone attemping to brute force hack my accounts. ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
