What can I do to stop dictionary attack? Here is a snippet of the log
file 

16-01-2003 log file

01:16 00:05 SMTP-(00000A58) Creating message from Postmaster
01:16 00:05 SMTP-(00000A58) finished D:\IMAIL\spool\Q86da134.SMD
status=2
01:16 00:05 SMTPD(1B1B0134) [210.21.10.158] MAIL
FROM:<[EMAIL PROTECTED]>
01:16 00:05 SMTPD(1B1B0134) [210.21.10.158] RCPT TO:<[EMAIL PROTECTED]>
01:16 00:05 SMTPD(1B1B0134) [210.21.10.158] D:\IMAIL\spool\D86e0134.SMD
3352
01:16 00:05 SMTP-(00000660) processing D:\IMAIL\spool\Q86e0134.SMD
01:16 00:05 SMTP-(00000660) Trying aol.com (0)
01:16 00:05 SMTPD(1B1B0134) [210.21.10.158] MAIL FROM:<[EMAIL PROTECTED]>
01:16 00:05 SMTP-(00000660) Connect aol.com [64.12.136.121:25] (1)
01:16 00:05 SMTPD(1B1B0134) [210.21.10.158] RCPT TO:<[EMAIL PROTECTED]>
01:16 00:05 SMTP-(00000660) 220-rly-xc05.mx.aol.com ESMTP
mail_relay_in-xc5.8; W
ed, 15 Jan 2003 10:55:38 1900
01:16 00:05 SMTP-(00000660) 220-America Online (AOL) and its affiliated
companie
s do not
01:16 00:05 SMTP-(00000660) 220-     authorize the use of its
proprietary comput
ers and computer
01:16 00:05 SMTP-(00000660) 220-     networks to accept, transmit, or
distribute
 unsolicited bulk

One strange things is my other log file on 19-01-2003 doesn't contain
many SMTPD entries but yet I got thousands of mail in the spool.
Shouldn't there be entries in the log file?? I can only detect the Ip
from the .GSE file

D:\IMail\spool2> type d658d533.gse | more
Date:     Sat, 18 Jan 2003 19:57:04 +0800
Message-Id: <[EMAIL PROTECTED]>
From:     "Postmaster" <[EMAIL PROTECTED]>
Sender:   <[EMAIL PROTECTED]>
To:       <[EMAIL PROTECTED]>
Subject:  Undeliverable Mail
X-Mailer: <SMTP32 v20010131>

Unknown user: [EMAIL PROTECTED]


Original message follows.

Received: from Garcia [210.21.200.149] by mail.lifespanmortgage.com.au
with P
  (SMTPD32-6.06) id A10C1900058; Sat, 18 Jan 2003 19:57:00 +0800
Reply-To: "Curtis Carazo"<[EMAIL PROTECTED]>
From: "Curtis Carazo"<[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]





To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to