I have trouble with that same spam EVERY day. Mostly from korea but also
germany and italy.
I try putting the IPs in the blocked list, but they change too. That's why I
would like to have IMail use a text file for the blocked list. I can have a
monitoring program stick IPs in there on the fly. Someone trys to send a
message to x number of non-existant users in a certain amount of time, their
IP goes in the block list.
Brian Andrus
-----Original Message-----
From: Kevin Bennett [mailto:[EMAIL PROTECTED]]
Sent: Thursday, November 30, 2000 10:57 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] server attack
We had the same problem here a week or two ago. The attacks were coming
from
UUNET dial-up lines. We blocked some of the IP addresses, but they just
kept
switching lines.
Fortunately, these attacks didn't significantly slow down the IMail server,
so
we just waited them out. They obviously moved on to other targets...
The UUNET security forces were quite uninterested in tracking or stopping
the
abusers.
BTW, the only way I noticed that anything was amiss was the increased log
file
size...
Kevin
------------------------------------------------------------------
Kevin E. Bennett Automation Associates, Inc.
Senior Simulation Analyst http://www.aaisim.com
[EMAIL PROTECTED]
+1 858 481 6050 x113 Voice Systems Design Analysis
+1 858 481 7427 FAX and Simulation Modeling
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Jack Taugher
> Subject: Re: [IMail Forum] server attack
>
>
> I see the problem. It's coming from FLORIDA -- they appear to have more
> problems than just counting, eh?
>
> > 11:29 03:48 SMTPD(07C30154) [63.17.249.128] RCPT To:<[EMAIL PROTECTED]>
> > 11:29 03:48 SMTPD(07C30154) [63.17.249.128] ERR florida.com invalid user
> > <[EMAIL PROTECTED]
> > 11:29 03:48 SMTPD(07C30154) [63.17.249.128] RCPT
To:<[EMAIL PROTECTED]>
> > 11:29 03:48 SMTPD(07C30154) [63.17.249.128] ERR florida.com invalid user
> > <[EMAIL PROTECTED]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
