Hi,

It sure seems as if with Version 10 they managed to break that feature
entirely. Before V10, they had the bug that they were even blocking SMTP
auth users and with V10 that is listed as one of the fixes.

But, now it seems as if Imail 

a) doesn't wait for the configured number of bad addresses or hard/soft
errors, AND
b) doesn't re-enable an IP address after the configured time interval.

Look at this complete string of email transactions below. Before 12:01 the
IP address 65.215.109.43 was blocked. We manually removed the block.

At 12:01 and 12:07 TWO emails were sent (although there was one full mailbox
- nothing the sending mail server can do anything about!).

At 12:07 finally was ONE "invalid user" - which IMail uses as reason to
block that IP addresses, even though the configured threshold was THREE max
invalid recipients per session!

But worse than that, 12:12 and 12:23 (no clearly MORE than 5 minutes since
the original block), access is STILL being denied.

Since one cannot operate the mail server without Dictionary Attack defense -
but also cannot run Imail 10 permanently blocking legitimate IP addresses -
Imail 10's usability is severely compromised! 

Dictionary Attack Settings 
Max Invalid Recipients Per Session:  3
Soft Error Limits:  3
Hard Error Limit:  2
Minutes To Deny Access:  5
Error Delay Seconds:  10

06:19 11:51 SMTPD(807b022e00000940) Denied access from 65.215.109.43

06:19 12:01 SMTPD(82f2019f00000452) [63.107.174.14] connect 65.215.109.43
port 55251
06:19 12:01 SMTPD(82f2019f00000452) [65.215.109.43] EHLO
pa-smtp-c.catalognavigator.com
06:19 12:01 SMTPD(82f2019f00000452) [65.215.109.43] MAIL
From:<[EMAIL PROTECTED]>
06:19 12:01 SMTPD(82f2019f00000452) [65.215.109.43] RCPT
To:<[EMAIL PROTECTED]>
06:19 12:01 SMTPD(82f2019f00000452) [65.215.109.43]
D:\IMail\spool\D82f2019f00000452.SMD 2630
06:19 12:01 SMTPD(82f2019f00000452) performing antispam checks
06:19 12:02 SMTP-(82f2019f00000452) processing
D:\IMail\spool\q82f2019f00000452.smd
06:19 12:02 SMTP-(82f2019f00000452) ldeliver boighill.com somemailbox-main
(1) [EMAIL PROTECTED] 2951
06:19 12:02 SMTP-(82f2019f00000452) finished
D:\IMail\spool\q82f2019f00000452.smd status=1

06:19 12:01 SMTPD(82f5019f00000459) [65.215.109.43] MAIL
From:<[EMAIL PROTECTED]>
06:19 12:01 SMTPD(82f5019f00000459) [65.215.109.43] RCPT
To:<[EMAIL PROTECTED]>
06:19 12:01 SMTPD(82f5019f00000459) performing antispam checks
06:19 12:02 SMTP-(82f5019f00000459) processing
D:\IMail\spool\q82f5019f00000459.smd
06:19 12:02 SMTP-(82f5019f00000459) ERR accu-scope.com someothermailbox
mailbox size too large (15000000-15002996)
06:19 12:02 SMTP-(82f5019f00000459) Creating message from Postmaster
06:19 12:02 SMTP-(82f5019f00000459) Delivery process now using new file:
8305000012b4347d
06:19 12:02 SMTP-(82f5019f00000459) finished
D:\IMail\spool\q82f5019f00000459.smd status=2

06:19 12:07 SMTPD(844701b10000093b) [63.107.174.14] connect 65.215.109.43
port 45751
06:19 12:07 SMTPD(844701b10000093b) [65.215.109.43] EHLO
pa-smtp-c.catalognavigator.com
06:19 12:07 SMTPD(844701b10000093b) [65.215.109.43] MAIL
From:<[EMAIL PROTECTED]>
06:19 12:07 SMTPD(844701b10000093b) [65.215.109.43] RCPT
To:<[EMAIL PROTECTED]>
06:19 12:07 SMTPD(844701b10000093b) [65.215.109.43]
D:\IMail\spool\D844701b10000093b.SMD 2838
06:19 12:07 SMTPD(844701b10000093b) performing antispam checks
06:19 12:07 SMTP-(844701b10000093b) ldeliver boighill.com somemailbox-main
(1) [EMAIL PROTECTED] 3159
06:19 12:07 SMTP-(844701b10000093b) finished
D:\IMail\spool\q844701b10000093b.smd status=1

06:19 12:07 SMTPD(844801b100000940) [65.215.109.43] MAIL
From:<[EMAIL PROTECTED]>
06:19 12:07 SMTPD(844801b100000940) [65.215.109.43] RCPT
To:<[EMAIL PROTECTED]>
06:19 12:07 SMTPD(844801b100000940) [65.215.109.43]
D:\IMail\spool\D844801b100000940.SMD 2651
06:19 12:07 SMTPD(844801b100000940) performing antispam checks
06:19 12:07 SMTP-(844801b100000940) processing
D:\IMail\spool\q844801b100000940.smd
06:19 12:07 SMTP-(844801b100000940) ERR accu-scope.com someothermailbox
mailbox size too large (15000000-15002996)
06:19 12:07 SMTP-(844801b100000940) Creating message from Postmaster
06:19 12:07 SMTP-(844801b100000940) Delivery process now using new file:
8457000012b45a4c
06:19 12:07 SMTP-(844801b100000940) finished
D:\IMail\spool\q844801b100000940.smd status=2

06:19 12:07 SMTPD(844b01b100000948) [65.215.109.43] MAIL
From:<[EMAIL PROTECTED]>
06:19 12:07 SMTPD(844b01b100000948) [65.215.109.43] RCPT
To:<[EMAIL PROTECTED]>
06:19 12:07 SMTPD(844b01b100000948) [65.215.109.43] ERR
Mail.Webhost.HM-Software.com invalid user <[EMAIL PROTECTED]
06:19 12:07 SMTPD(844b01b100000948) [65.215.109.43] max errors exceeded,
address will be denied future connections for 5 minutes

06:19 12:12 SMTPD(8587021100000dbf) Denied access from 65.215.109.43

06:19 12:23 SMTPD(87fc01ca0000043d) Denied access from 65.215.109.43

Best Regards,
Andy


To Unsubscribe: http://imailserver.com/support/discussion_list/
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://imailserver.com/support/kb.html

Reply via email to