It is a little tricky from the standpoint that it does not automatically block the IPs and Blackice does not document how to enable this feature. I actually got it working some years ago when I found a guy who had written their software manual. He and I corresponded and he helped me get it figured out. Out-of-the-box it reports on email harvesting but does not block the IPs.
There is an Excel document that needs some parameter changes and there is an .INI file that also needs a change added to it. If anyone buys the software and needs help configuring it, I can post the necessary changes to the list. > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Glenn \ > WCNet > Sent: Wednesday, September 20, 2006 3:15 PM > To: [email protected] > Subject: Re: [Declude.JunkMail] Spam Spike > > How tricky is it to configure this? Current price I find is $300. > > G.Z. > > > ----- Original Message ----- > From: "Dave Beckstrom" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Wednesday, September 20, 2006 1:08 PM > Subject: RE: [Declude.JunkMail] Spam Spike > > > I run Blackice Server on the mail server. It drops the connecting IP if we > receive more than a user specified number of attempts for non-existent email > addresses within a user specified time limit. It then blocks that IP for a > user specified amount of time before removing the block. > > It prevents email address harvesting from our server. > > Not bad for a product that cost about $200 if I recall correctly. > > A side benefit is that it stores a text file with the hostname/IP address in > a folder for every blocked IP. Over time, I can see patterns and > permanently block those IP ranges in my firewall if I so desire. > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris > Anton > > Sent: Tuesday, September 19, 2006 1:02 PM > > To: [email protected] > > Subject: Re: [Declude.JunkMail] Spam Spike > > > > Darrell, We are averaging 40 to 50% on the processor. I was just > surprised because > > in 3 years we haven't seen a spike this large. Most of them are > dictionary style. But > > since they aren't from the same IP, I don't think the imail 2006 > dictionary feature > > would help us. Thoughts? > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
