RE: [IMail Forum] Control Access List

[Mike Odryna]

Title: Control Access List

Yes,  this particular address was added about two months ago.  When I saw the address today in the logs I went to add it and to my amazement it was already there.   Mike From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Thursday, October 20, 2005 8:12 PM To: IMail_Forum@list.ipswitch.com Subject: RE: [IMail Forum] Control Access List Did you restart both the Imail SMTP service and the Imail Queue Manager services?   John T eServices For You   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Odryna Sent: Thursday, October 20, 2005 12:45 PM To: IMail_Forum@list.ipswitch.com Subject: [IMail Forum] Control Access List   I manually enter IP address in the Control Access List under SMTP Security.  I have Granted Access checked and manually add IP’s that I would like the SMTP not to accept a connection from.  One address in particular is 193.95.242.196.  Looking though the syslog, this entry was under SMTPD Errors.  79 Invalid User IP = 193.95.242.196.  As I did more research I found these entries in the log. 10:20 00:47 SMTPD(214901bc00002d57) [193.95.242.196] EHLO mail.xhorizont.com 10:20 00:47 SMTPD(214901bc00002d57) [193.95.242.196] MAIL FROM:<[EMAIL PROTECTED]> 10:20 00:47 SMTPD(214901bc00002d57) [193.95.242.196] RCPT TO:<[EMAIL PROTECTED]> 10:20 00:47 SMTPD(214901bc00002d57) [x] looking up odryna.com in HOSTS 10:20 00:47 SMTPD(214901bc00002d57) [193.95.242.196] ERR jeep.lakespeed.com invalid user <[EMAIL PROTECTED] 10:20 00:47 SMTPD(214901bc00002d57) [193.95.242.196] RCPT TO:<[EMAIL PROTECTED]> 10:20 00:47 SMTPD(214901bc00002d57) [x] looking up odryna.com in HOSTS 10:20 00:47 SMTPD(214901bc00002d57) [193.95.242.196] ERR jeep.lakespeed.com invalid user <[EMAIL PROTECTED] 10:20 00:47 SMTPD(214901bc00002d57) [193.95.242.196] Max Invalid RCPTs Exceeded Each time the IP was doing a dictionary attack. Why did the SMTP server accept the connection?  I am using version 8.21 – 2005.07.11.2  with MXGuard and ClamAV Any help would be appreciated. Mike Odryna Owner Island Pond Computer