Reply to: Len Conrad
Re: [IMail Forum] Dictionary attack on Monday 7:46:46 AM
Not with the Black Ice firewall. Once a block is up there is
almost no processor used at all. You can set the thresholds for
this too using a conventional INI file configuration:
from blackice.ini
[Settings]
smtp.error.count=10 ;total errors within
smtp.error.interval=120 ;this amount of time(sec)then blocked
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
----- Copy of Original Message(s): -----
>>Does anyone knows a good way to prevent dictionary attacks?
L> For defenses on the Imail server, the very high volume attacks will still
L> seriously exhaust the Imiail machine's resources unless you have tons of
L> spare capacity and result in a denial of probably significant level of
L> service anyway.
L> An filtering SMTP proxy like IMGate will block the attack whilte sustaining
L> very high volume attacks and still provide service.
L> The advanced IMGate config detects attacks in a minute or two and firewalls
L> the attacking ip's.
L> Len
L> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
L> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
L> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
L> --
L> ActivatorMail(tm) ver.082302 Scanned for all viruses by
L> www.activatormail.com intelligent anti-virus anti-spam service
--
ActivatorMail(tm) ver.082302 Scanned for all viruses by
www.activatormail.com intelligent anti-virus anti-spam service
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
