it is 2006.01 but they never tripped the access level
settings. I added it manually to the list.
Eric Shanbrom wrote:
What
version of IMail... If it is prior to 2006 then the max errors were
reached and the cinnection dropped. They then connected again. IN 2006
you can have that IP added to the Access control list for a
configurable amount of time so cannot make an instnat reconnect
Eric S
Matrosity Hosting wrote:
here's a excerpt from the log on this:
01:23 08:37 SMTPD(dc0801420000b4da) [65.112.155.254] connect
195.22.225.11 port 3727
01:23 08:37 SMTPD(dc0801420000b4da) [195.22.225.11] EHLO moldova.cc
01:23 08:37 SMTPD(dc0801420000b4da) [195.22.225.11] MAIL
FROM:<[EMAIL PROTECTED]>
01:23 08:37 SMTPD(dc0801420000b4da) [195.22.225.11] RCPT
TO:<[EMAIL PROTECTED]>
01:23 08:37 SMTPD(dc0801420000b4da) [x] looking up ledgerplus.com in
HOSTS
01:23 08:37 SMTPD(dc0801420000b4da) [195.22.225.11] ERR
PINE.MATROSITY.COM invalid user <[EMAIL PROTECTED]
01:23 08:37 SMTPD(dc0801420000b4da) [195.22.225.11] RCPT
TO:<[EMAIL PROTECTED]>
01:23 08:37 SMTPD(dc0801420000b4da) [x] looking up ledgerplus.com in
HOSTS
01:23 08:37 SMTPD(dc0801420000b4da) [195.22.225.11] ERR
PINE.MATROSITY.COM invalid user <[EMAIL PROTECTED]
01:23 08:37 SMTPD(dc0801420000b4da) [195.22.225.11] Max Invalid RCPTs
Exceeded
It seems they never tripped the dictionary attack so this went on all
day with the same email addresses.
Matrosity Hosting wrote:
I ran a report for smtpd connections. What
could this mean?
4,358 195.22.225.11
I ran a tracert and came up with mdl.net?
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
|
