>I have seen talk on the Imail Forum about people attempting to script
>something to combat Dictionary Attacks by blocking IPs that send over too
>many RCPT TO commands that result in "ERR invalid user".
>
>Scott, is this something Declude will eventually handle for us? Or is
>there anything out there that is already written and available?
>
>I have also seen talk about running BlackICE (http://www.netice.com/) to
>automatically block IPs that cause too many SMTP Errors. Does anybody
>have an opinion on if this is the best solution right now?
As far as I know, BlackICE is the only software that may be able to
accomplish this.
We do have something we have been working on that will detect when the
dictionary attacks occur and will automatically block the IPs, but it is
not currently a high priority.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
