Hi all,
 
I'm beggining to find this kind of "attack" into my logs:
 
05:27 04:22 SMTPD(0904026E) [216.53.218.171] MAIL From: <[EMAIL PROTECTED]>
05:27 04:22 SMTPD(0904026E) [216.53.218.171] RCPT To:<[EMAIL PROTECTED]>
05:27 04:22 SMTPD(0904026E) [216.53.218.171] ERR mail.fis.com invalid user <[EMAIL PROTECTED]
05:27 04:22 SMTPD(0904026E) [216.53.218.171] RCPT To:<[EMAIL PROTECTED]>
05:27 04:22 SMTPD(0904026E) [216.53.218.171] ERR mail.fis.com invalid user <[EMAIL PROTECTED]
05:27 04:22 SMTPD(0904026E) [216.53.218.171] RCPT To:<[EMAIL PROTECTED]>
05:27 04:22 SMTPD(0904026E) [216.53.218.171] ERR mail.fis.com invalid user <[EMAIL PROTECTED]
05:27 04:22 SMTPD(0904026E) [216.53.218.171] RCPT To:<[EMAIL PROTECTED]>
05:27 04:22 SMTPD(0904026E) [216.53.218.171] ERR mail.fis.com invalid user <[EMAIL PROTECTED]
.
.
 
They try with hundred of email address until they get one valid email address.
 
Is there any way to avoid this? I heard about limiting the number of persons in the TO: clause. Does this work good? how should I setup that? What happen if someone do this? will be rejected?
 
Thank you very much,

Damian

Reply via email to