This feature blocks a user's request if the IP address that they orginated their Imail session from changes. This keeps a hacker from jumping in on a users sessions. You must turn this feature OFF if you have users on AOL that want to use web-mail since AOL uses rolling IP addresses (e.g. - an AOL user's IP address can change as often as every GET request. They don't keep the same IP for an entire dial-up session.)
David ----- Original Message ----- From: "Martha Flugstad" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 04, 2001 10:39 AM Subject: RE: [IMail Forum] Auto-deny possible hack attempts > We have already tried to telnet to port 25 from that particular IP number. > We cannot connect. We have also looked at the logs and cannot find > anything. We've also checked the Relay for addresses. Our whole block of > IP addresses is listed. The Imail server seems to be blocking any > connection to port 25 from that IP number. However, we can telnet to port > 110 (POP3) on the Imail server from that IP number. So far, we are baffled. > Thanks for your help. > > Martha > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Eric Shanbrom > Sent: Tuesday, December 04, 2001 9:01 AM > To: [EMAIL PROTECTED] > Subject: Re: [IMail Forum] Auto-deny possible hack attempts > > > You could also do a telnet session to the mail server and see if any errors > are returned. Best thing though is to look in the log on your IMail server. > > Eric S > ----- Original Message ----- > From: "R. Scott Perry" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, December 04, 2001 9:48 AM > Subject: Re: [IMail Forum] Auto-deny possible hack attempts > > > > > > >Does anyone know how Imail implements the "auto-deny possible hack > > >attempts" on the SMTP security? > > > > Yes. You check the box that says "Auto-deny possible hack attempts" on > the > > SMTP Security tab. > > > > >We have an IP number that is being refused access to port 25 on our Imail > > >server. > > >This IP number was assigned to a computer that received a virus. We have > > >cleaned > > >the virus and would like to unblock the IP number. Thanks for any help > > >you can give me. > > > > I believe you can't see the IPs that get listed, but stopping and > > restarting the SMTP service should clear the list (unlike the kill list, > > which won't get reset with a SMTP stop/restart). > > > > However, I haven't heard of a virus that will trigger the "Auto-deny > > possible hack attempts" (the Nimda one would, if it connected to the SMTP > > port the same way it connects to the HTTP port, but it doesn't connect to > > the SMTP port that way). So I would suspect there is another problem. > You > > might want to try having them do a ping or tracert/traceroute to your mail > > server, and see if they can reach it at all. > > > > You may also want to see if your firewall is doing the blocking. > > > > -Scott > > --- > > Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for > > IMail. http://www.declude.com > > > > > > Please visit http://www.ipswitch.com/support/mailing-lists.html > > to be removed from this list. > > > > An Archive of this list is available at: > > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > > > > Please visit http://www.ipswitch.com/support/mailing-lists.html > to be removed from this list. > > An Archive of this list is available at: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > > Please visit http://www.ipswitch.com/support/mailing-lists.html > to be removed from this list. > > An Archive of this list is available at: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
