> I have this ongoing problem where someone is running a program
> that does this:
> 11:29 03:48 SMTPD(07C30154) [63.17.249.128] RCPT To:<[EMAIL PROTECTED]>
> 11:29 03:48 SMTPD(07C30154) [63.17.249.128] ERR florida.com invalid user
> <[EMAIL PROTECTED]
That's called a "dictionary attack", where a spammer steals some of your
service in order to obtain E-mail addresses on your system. They have a
database of common usernames (easy enough to get; they just take the E-mail
list that they spam to, and see what people use), and try all of them
against your server. The goal is to find accounts to send more spam to.
We are planning to add a feature to our Declude JunkMail that will detect
these dictionary attacks.
-Scott
Declude: Anti-spam and Anti-virus solutions for IMail. http://www.declude.com
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
