Hi all,

for some days now my server is under what I think is a dictionary attack. Someone is trying to send mail to [EMAIL PROTECTED] from apparently different IP sources every few minutes. Is there a way to activate the teergrube or tell esmtpd to ignore (not answer or delay) calls to unknown users at this domain?

Why are they doing this? Is this a header overflow attack or mere harvesting? Should I brace the server somehow against this thing?

Please?
worried me.


Aug 15 08:31:33 debismurf courieresmtpd: error,relay=::ffff:206.46.170.58,from=<>,to=<[EMAIL PROTECTED]>: 550 User unknown.
Aug 15 08:31:41 debismurf courieresmtpd: error,relay=::ffff: 206.46.170.58,from=<[EMAIL PROTECTED]>,to=<[EMAIL PROTECTED] den.at>: 550 User unknown.
Aug 15 08:35:18 debismurf courieresmtpd: error,relay=::ffff:206.46.170.180,from=<>,to=<[EMAIL PROTECTED]>: 550 User unknown.
Aug 15 08:35:26 debismurf courieresmtpd: error,relay=::ffff: 206.46.170.180,from=<[EMAIL PROTECTED]>,to=<[EMAIL PROTECTED] aden.at>: 550 User unknown.
Aug 15 10:42:33 debismurf courieresmtpd: error,relay=::ffff:130.76.64.48,from=<>,to=<[EMAIL PROTECTED]>: 550 User unknown.
Aug 15 11:53:13 debismurf courieresmtpd: error,relay=::ffff: 222.120.40.173,from=<[EMAIL PROTECTED]>,to=<[EMAIL PROTECTED] et>: 513 Relaying denied.
Aug 15 12:01:14 debismurf courieresmtpd: error,relay=::ffff:206.46.170.68,from=<>,to=<[EMAIL PROTECTED]>: 550 User unknown.
Aug 15 12:01:23 debismurf courieresmtpd: error,relay=::ffff: 206.46.170.68,from=<[EMAIL PROTECTED]>,to=<[EMAIL PROTECTED] laden.at>: 550 User unknown.
Aug 15 12:49:19 debismurf courieresmtpd: error,relay=::ffff:211.155.223.13,from=<>,to=<[EMAIL PROTECTED]>: 550 User unknown.




-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to