For days now, I have been watching our Imail server 9.04 being hit be
dozens of outside IP's using a dictionary attack style, which Imail
can't block.
Instead of sending multiple email addresses per session ... it tries
ONE email address, and when it fails, doesn't connect again for
another 2 or 3 minutes, then tries another single address, which
fails and keeps repeating.
Since Imail sees this as a single message that fails, it doesn't
detect it as a dictionary attack.
But this is happening from a few dozen IP's that I keep blocking
manually and more pop up ... so it is taking a lot of manual work/
reading logs etc ...
Anyone see anything like this?
David
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
